| Threats + Use Case

PowerSploit PsExec for PowerShell

Software Exploit

Overview of PowerSploit PsExec

PowerSploit PowerShell script (Invoke-PsExec.ps1) from Empire is a function (cmdlet) that lets you execute PowerShell and batch/cmd.exe code asynchronously on target Windows computers, using PsExec.exe.

 

References

 

Tags

Execution
PowerShell
Splunk
APT33
APT41
menuPass
MuddyWater
Patchwork

Categories: ,

APT33, APT41, Defense Evasion, Execution, Lateral Movement, menuPass, MuddyWater, Patchwork, PowerShell, Splunk, Use Cases