Home > List all groups > List all tools > List all groups using tool WmiExec

Threat Group Cards: A Threat Actor Encyclopedia

Names	WmiExec
Category	Tools
Type	Remote command
Description	(SecureWorks) This publicly available tool uses WMI to create SYSTEM-level shells on remote hosts.
Information	<https://www.secureworks.com/research/bronze-president-targets-ngos> <https://github.com/Twi1ight/AD-Pentest-Script/blob/master/wmiexec.vbs>

Last change to this tool card: 04 April 2022

Download this tool card in JSON format

Changed	Name	Country	Observed
APT groups
	↳ Subgroup: DEV-0270, Nemesis Kitten		2022-Nov 2023
	Mustang Panda, Bronze President		2012-Jun 2025
	Stone Panda, APT 10, menuPass		2006-Mar 2025

3 groups listed (3 APT, 0 other, 0 unknown)

APT groups