Names | PsExec | |
Category | Tools | |
Type | Remote command | |
Description | PsExec is a free Microsoft tool that can be used to execute a program on another computer. It is used by IT administrators and attackers and is part of SysInternals. | |
Information | <https://docs.microsoft.com/en-us/sysinternals/downloads/psexec> <https://www.bleepingcomputer.com/news/security/new-psexec-spinoff-lets-hackers-bypass-network-security-defenses/> | |
MITRE ATT&CK | <https://attack.mitre.org/software/S0029/> | |
AlienVault OTX | <https://otx.alienvault.com/browse/pulses?q=tag:psexec> |
Last change to this tool card: 18 November 2022
Download this tool card in JSON format
Changed | Name | Country | Observed | ||
APT groups | |||||
Allanite | [Unknown] | 2017 | |||
ALPHV, BlackCat Gang | [Unknown] | 2021-Mar 2024 | |||
↳ Subgroup: Scattered Spider | [Unknown] | 2022-Sep 2023 | |||
Antlion | 2011 | ||||
APT 20, Violin Panda | 2014-2017 | ||||
Boss Spider, Gold Lowell | 2015-Nov 2018 | ||||
Carbanak, Anunak | 2013-Apr 2023 | ||||
CostaRicto | [Unknown] | 2017 | |||
Dalbit | 2022 | ||||
Emissary Panda, APT 27, LuckyMouse, Bronze Union | 2010-Aug 2023 | ||||
Energetic Bear, Dragonfly | 2010-Mar 2022 | ||||
Gallium | 2018-Jun 2022 | ||||
GhostEmperor | 2020 | ||||
Goblin Panda, Cycldek, Conimes | 2013-Jun 2020 | ||||
IAmTheKing | 2018 | ||||
Indrik Spider | 2007-Dec 2021 | ||||
Kimsuky, Velvet Chollima | 2012-Mar 2024 | ||||
LockBit Gang | [Unknown] | 2019-Mar 2024 | |||
Lotus Blossom, Spring Dragon, Thrip | 2012-Mar 2022 | ||||
OPERA1ER | [Unknown] | 2016-Jul 2023 | |||
Operation Harvest | 2016 | ||||
Stone Panda, APT 10, menuPass | 2006-Feb 2022 | ||||
TA2101, Maze Team | [Unknown] | 2019-Feb 2024 | |||
TaskMasters | 2010-May 2021 | ||||
TEMP.Veles | 2014-Mar 2022 | ||||
Tiny Spider | [Unknown] | 2015-2017 | |||
Traveling Spider | [Unknown] | 2019-Mar 2021 | |||
Turla, Waterbug, Venomous Bear | 1996-Dec 2023 | ||||
UNC215 | 2019 | ||||
Wizard Spider, Gold Blackburn | 2014-Dec 2023 |
30 groups listed (30 APT, 0 other, 0 unknown)
Digital Service Security Center Follow us on |
Report incidents |
|
+66 (0)2-123-1227 | ||
[email protected] |