MITRE ATT&CK / Software / S0166

RemoteCMD

ID: S0166
Type: Malware
Platforms: Windows
Source: attack.mitre.org
MITRE last modified: 20 Jan 2026

RemoteCMD is a custom tool used by APT3 to execute commands on a remote system similar to SysInternal's PSEXEC functionality. ^[1]

Techniques used (3)

Groups using it (1)

G0022 APT3

References

Symantec Buckeye