RemoteCMD

Malware & Tools · RemoteCMD

· MalwareS0166 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

RemoteCMD is a custom tool used by APT3 to execute commands on a remote system similar to SysInternal's PSEXEC functionality. (Citation: Symantec Buckeye)

Tactic Coverage

execution (2)persistence (1)privilege escalation (1)command and control (1)

Used By (1 groups)

G0022APT3Gothic Panda, Pirpi

Techniques (3)

T1053.005Scheduled Task

executionpersistence

T1105Ingress Tool Transfer

command and control

T1569.002Service Execution

execution

References

https://attack.mitre.org/software/S0166 https://web.archive.org/web/20160910124439/http://www.symantec.com/connect/blogs/buckeye-cyberespionage-group-shifts-gaze-us-hong-kong