Sec
Lookup
Search
MITRE ATT&CK
software (malware)
S0166
RemoteCMD
Published 2018-01-16
Modified 2026-01-20
Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.1
Created
2018-01-16
Description
RemoteCMD
is a custom tool used by
APT3
to execute commands on a remote system similar to SysInternal's PSEXEC functionality.
Related
Uses · MITRE ATT&CK
(3)
T1569.002
Service Execution
sub-technique
T1053.005
Scheduled Task
sub-technique
T1105
Ingress Tool Transfer
technique
Referenced by MITRE ATT&CK · uses
(1)
G0022
APT3
group
References
https://web.archive.org/web/20160910124439/http://www.symantec.com/connect/blogs/buckeye-cyberespionage-group-shifts-gaze-us-hong-kong
Symantec Buckeye