RemoteCMD — Malware Profile

RemoteCMD is a custom tool used by APT3 to execute commands on a remote system similar to SysInternal's PSEXEC functionality.

MITRE ATT&CK techniques (3)

• T1053.005 Scheduled Task
• T1105 Ingress Tool Transfer
• T1569.002 Service Execution

Attributed threat actors

• APT3

Read the full analysis on IntelFusions