Skip to content

S0123 xCmd

xCmd is an open source tool that is similar to PsExec and allows the user to execute applications on remote systems. 1

Item Value
ID S0123
Version 1.0
Created 31 May 2017
Last Modified 17 October 2018
Navigation Layer View In ATT&CK® Navigator

Techniques Used

Domain ID Name Use
enterprise T1569 System Services -
enterprise T1569.002 Service Execution xCmd can be used to execute binaries on remote systems by creating and starting a service.1

Groups That Use This Software

ID Name References
G0006 APT1 2