Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 21:19:44 UTC
Home > List all groups > List all tools > List all groups using tool PsExec
 Tool: PsExec
Names PsExec
Category Tools
Type Remote command
Description
PsExec is a free Microsoft tool that can be used to execute a program on another
computer. It is used by IT administrators and attackers and is part of SysInternals.
Information
MITRE ATT&CK AlienVault OTX Last change to this tool card: 18 November 2022
Download this tool card in JSON format
All groups using tool PsExec
Changed Name Country Observed
APT groups
 Allanite [Unknown] 2017
 ALPHV, BlackCat Gang [Unknown] 2021-Mar 2024
 ↳ Subgroup: Scattered Spider [Unknown] 2022-Aug 2025
 Antlion 2011
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=8bfdf3b6-764f-4b42-89e3-ec6c422fcf8a
Page 1 of 3

APT 20, Violin Panda 2014-2017  
  Boss Spider, Gold Lowell 2015-Nov 2018
  Carbanak, Anunak 2013-Apr 2023
  CostaRicto [Unknown] 2017  
  Dalbit 2022  
  Emissary Panda, APT 27, LuckyMouse, Bronze Union 2010-Aug 2023  
  Energetic Bear, Dragonfly 2010-Mar 2022
  Gallium 2018-Jun 2022  
  Goblin Panda, Cycldek, Conimes 2013-Jun 2020  
  IAmTheKing 2018  
  Indrik Spider 2007-Oct 2024
  Kimsuky, Velvet Chollima 2012-Aug 2025
  LockBit Gang [Unknown] 2019-May 2025
  Lotus Blossom, Spring Dragon, Thrip 2012-Aug 2024  
  OPERA1ER [Unknown] 2016-Jul 2023
  Operation Harvest 2016  
  Salt Typhoon, GhostEmperor 2020-Feb 2025
  Stone Panda, APT 10, menuPass 2006-Mar 2025
  TA2101, Maze Team [Unknown] 2019-Feb 2024
  TaskMasters 2010-May 2021  
  TEMP.Veles 2014-Mar 2022
  Tiny Spider [Unknown] 2015-2017  
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=8bfdf3b6-764f-4b42-89e3-ec6c422fcf8a
Page 2 of 3

ToddyCat 2020-2024  
  Traveling Spider [Unknown] 2019-Mar 2021  
  Turla, Waterbug, Venomous Bear 1996-2024  
  UNC215 2019  
  Wizard Spider, Gold Blackburn 2014-May 2025
31 groups listed (31 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=8bfdf3b6-764f-4b42-89e3-ec6c422fcf8a
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=8bfdf3b6-764f-4b42-89e3-ec6c422fcf8a
Page 3 of 3