RemoteCMD

MITRE

Malware Type:
Other

First seen:
Unknown

Last seen:
Unknown

Details:

[RemoteCMD](https://attack.mitre.org/software/S0166) is a custom tool used by [APT3](https://attack.mitre.org/groups/G0022) to execute commands on a remote system similar to SysInternal's PSEXEC functionality. (Citation: Symantec Buckeye)

Associated Techniques (3)

ID	ATT&CK	Tactics
T1053.005	Scheduled Task	-
T1105	Ingress Tool Transfer	-
T1569.002	Service Execution	-

Used by Actors (1)

APT3
Nation-state

Metadata

ID:	212
Created:	13/01/2026 17:48
Updated:	06/03/2026 16:00