Winexe
MITRE ATT&CK: S0191 View on attack.mitre.org
Aliases: Winexe
- Profile updated
- 2026-07-07 12:43:23
Context
Winexe is a lightweight, open source tool similar to PsExec designed to allow system administrators to execute commands on remote servers. Winexe is unique in that it is a GNU/Linux based client.
Detection coverage
- 39 Sigma rules
Malware & tools used
- Service Execution (attack-pattern)
Used by threat actors
- Silence (threat-actor)
- APT28 (threat-actor)
- DarkVishnya (threat-actor)
Reports & references
- netzpolitik.org — Digital Attack On German Parliament Investigative Report On The Hack Of The Left Party Infrastructure In Bundestag (report)
- MITRE ATT&CK — S0191 (report)
- github.com — Winexe (report)