Names | PsExec | |
Category | Tools | |
Type | Remote command | |
Description | PsExec is a free Microsoft tool that can be used to execute a program on another computer. It is used by IT administrators and attackers and is part of SysInternals. | |
Information | <https://docs.microsoft.com/en-us/sysinternals/downloads/psexec> | |
MITRE ATT&CK | <https://attack.mitre.org/software/S0029/> | |
AlienVault OTX | <https://otx.alienvault.com/browse/pulses?q=tag:psexec> |
Last change to this tool card: 22 April 2020
Download this tool card in JSON format
Changed | Name | Country | Observed | ||
APT groups | |||||
Allanite | [Unknown] | 2017 | |||
![]() | ALPHV, BlackCat Gang | [Unknown] | 2021-Apr 2022 ![]() | ||
Antlion | ![]() | 2011 | |||
APT 20, Violin Panda | ![]() | 2014-2017 | |||
Boss Spider, Gold Lowell | ![]() | 2015-Nov 2018 | ![]() | ||
Carbanak, Anunak | ![]() | 2013-Nov 2021 | ![]() | ||
CostaRicto | [Unknown] | 2017 | |||
Emissary Panda, APT 27, LuckyMouse, Bronze Union | ![]() | 2010-Mar 2021 | |||
Energetic Bear, Dragonfly | ![]() | 2010-Oct 2020 | ![]() | ||
Gallium | ![]() | 2018 | |||
GhostEmperor | ![]() | 2020 | |||
Goblin Panda, Cycldek, Conimes | ![]() | 2013-Jun 2020 | |||
IAmTheKing | ![]() | 2018 | |||
Indrik Spider | ![]() | 2014-Dec 2021 | ![]() | ||
Kimsuky, Velvet Chollima | ![]() | 2012-Jan 2022 | ![]() | ||
Lotus Blossom, Spring Dragon, Thrip | ![]() | 2012-Jun 2018 | |||
Operation Harvest | ![]() | 2016 | |||
Stone Panda, APT 10, menuPass | ![]() | 2006-Feb 2022 ![]() | ![]() | ||
TA2101, Maze Team | [Unknown] | 2019-Feb 2022 ![]() | ![]() | ||
TaskMasters | ![]() | 2010-May 2021 | |||
TEMP.Veles | ![]() | 2014-Mar 2022 ![]() | ![]() | ||
Tiny Spider | [Unknown] | 2015-2017 | |||
Traveling Spider | [Unknown] | 2019-Mar 2021 | |||
![]() | Turla, Waterbug, Venomous Bear | ![]() | 1996-Apr 2022 ![]() | ||
UNC215 | ![]() | 2019 | |||
![]() | Wizard Spider, Gold Blackburn | ![]() | 2014-Apr 2022 ![]() | ![]() |
26 groups listed (26 APT, 0 other, 0 unknown)
Digital Service Security Center Follow us on![]() ![]() |
Report incidents |
|
![]() |
+66 (0)2-123-1227 | |
![]() |
[email protected] |