1. Home
  2. Software
  3. xCmd

xCmd

xCmd is an open source tool that is similar to PsExec and allows the user to execute applications on remote systems. [1]

ID: S0123
ⓘ
Type: TOOL
ⓘ
Platforms: Windows
Version: 1.0
Created: 31 May 2017
Last Modified: 17 October 2018
Enterprise Layer
download view

Techniques Used

Domain ID Name Use
Enterprise T1569 .002 System Services: Service Execution

xCmd can be used to execute binaries on remote systems by creating and starting a service.[1]

Groups That Use This Software

ID Name References
G0006 APT1

[2]

References

  1. Rayaprolu, A.. (2011, April 12). xCmd an Alternative to PsExec. Retrieved August 10, 2016.
  1. Mandiant. (n.d.). Appendix C (Digital) - The Malware Arsenal. Retrieved July 18, 2016.