38
Groups Using This
1
Platforms
2
Prevalence Rank
0
Known Aliases
Description

PsExec is a free Microsoft tool that can be used to execute a program on another computer. It is used by IT administrators and attackers.

View MITRE record โ†—

Platforms
Windows
Groups Deploying PsExec (38)
G0094
Kimsuky
๐Ÿ‡ท๐Ÿ‡บ Russia130 techniques19 software
G1017
Volt Typhoon
๐Ÿ‡จ๐Ÿ‡ณ China81 techniques17 software
G0034
Sandworm Team
๐Ÿ‡ท๐Ÿ‡บ Russia79 techniques27 software
G0059
Magic Hound
๐Ÿ‡ฎ๐Ÿ‡ท Iran78 techniques13 software
G0049
OilRig
๐Ÿ‡ฎ๐Ÿ‡ท Iran76 techniques30 software
G0010
Turla
๐Ÿ‡ท๐Ÿ‡บ Russia68 techniques30 software
G0016
APT29
๐Ÿ‡ท๐Ÿ‡บ Russia66 techniques49 software
G0102
Wizard Spider
๐Ÿ‡ท๐Ÿ‡บ Russia64 techniques22 software
G0114
Chimera
๐Ÿ‡จ๐Ÿ‡ณ China59 techniques6 software
G1051
Medusa Group
57 techniques5 software
G0035
Dragonfly
๐Ÿ‡ท๐Ÿ‡บ Russia56 techniques10 software
G0087
APT39
๐Ÿ‡ฎ๐Ÿ‡ท Iran53 techniques11 software
G1043
BlackByte
48 techniques8 software
G1003
Ember Bear
๐Ÿ‡ท๐Ÿ‡บ Russia47 techniques11 software
G0045
menuPass
๐Ÿ‡จ๐Ÿ‡ณ China46 techniques25 software
G0125
HAFNIUM
๐Ÿ‡จ๐Ÿ‡ณ China44 techniques6 software
G0117
Fox Kitten
๐Ÿ‡ฎ๐Ÿ‡ท Iran41 techniques5 software
G0037
FIN6
40 techniques12 software
G0061
FIN8
36 techniques11 software
G0080
Cobalt Group
34 techniques6 software
G0119
Indrik Spider
๐Ÿ‡ท๐Ÿ‡บ Russia33 techniques8 software
G1046
Storm-1811
31 techniques7 software
G0093
GALLIUM
๐Ÿ‡ท๐Ÿ‡บ Russia31 techniques16 software
G1040
Play
26 techniques9 software
G1032
INC Ransom
25 techniques8 software
G0006
APT1
๐Ÿ‡จ๐Ÿ‡ณ China23 techniques17 software
G0077
Leafminer
๐Ÿ‡ฎ๐Ÿ‡ท Iran17 techniques4 software
G1024
Akira
17 techniques8 software
G0098
BlackTech
๐Ÿ‡จ๐Ÿ‡ณ China14 techniques6 software
G0019
Naikon
๐Ÿ‡จ๐Ÿ‡ณ China14 techniques15 software
G1009
Moses Staff
๐Ÿ‡ฎ๐Ÿ‡ท Iran12 techniques4 software
G0053
FIN5
๐Ÿ‡ท๐Ÿ‡บ Russia11 techniques6 software
G0105
DarkVishnya
10 techniques2 software
G0008
Carbanak
9 techniques4 software
G0003
Cleaver
๐Ÿ‡ฎ๐Ÿ‡ท Iran5 techniques4 software
G0076
Thrip
4 techniques3 software
G0028
Threat Group-1314
4 techniques2 software
G0088
TEMP.Veles
๐Ÿ‡ท๐Ÿ‡บ Russia0 techniques2 software
โ†‘