Home > List all groups > List all tools > List all groups using tool PsExec

Threat Group Cards: A Threat Actor Encyclopedia

Names	PsExec
Category	Tools
Type	Remote command
Description	PsExec is a free Microsoft tool that can be used to execute a program on another computer. It is used by IT administrators and attackers and is part of SysInternals.
Information	<https://docs.microsoft.com/en-us/sysinternals/downloads/psexec>
MITRE ATT&CK	<https://attack.mitre.org/software/S0029/>
AlienVault OTX	<https://otx.alienvault.com/browse/pulses?q=tag:psexec>

Last change to this tool card: 22 April 2020

Download this tool card in JSON format

Changed	Name	Country	Observed
APT groups
	Allanite	[Unknown]	2017
	ALPHV, BlackCat Gang	[Unknown]	2021-Aug 2022
	Antlion		2011
	APT 20, Violin Panda		2014-2017
	Boss Spider, Gold Lowell		2015-Nov 2018
	Carbanak, Anunak		2013-Nov 2021
	CostaRicto	[Unknown]	2017
	Emissary Panda, APT 27, LuckyMouse, Bronze Union		2010-Aug 2022
	Energetic Bear, Dragonfly		2010-Oct 2020
	Gallium		2018-Jun 2022
	GhostEmperor		2020
	Goblin Panda, Cycldek, Conimes		2013-Jun 2020
	IAmTheKing		2018
	Indrik Spider		2007-Dec 2021
	Kimsuky, Velvet Chollima		2012-Early 2022
	LockBit Gang	[Unknown]	2019-Sep 2022
	Lotus Blossom, Spring Dragon, Thrip		2012-Jun 2018
	Operation Harvest		2016
	Stone Panda, APT 10, menuPass		2006-Feb 2022
	TA2101, Maze Team	[Unknown]	2019-Feb 2022
	TaskMasters		2010-May 2021
	TEMP.Veles		2014-Mar 2022
	Tiny Spider	[Unknown]	2015-2017
	Traveling Spider	[Unknown]	2019-Mar 2021
	Turla, Waterbug, Venomous Bear		1996-May 2022
	UNC215		2019
	Wizard Spider, Gold Blackburn		2014-Jun 2022

27 groups listed (27 APT, 0 other, 0 unknown)

APT groups