1200KM / tool
Winexe — Attack Tool
Winexe is a lightweight, open source tool similar to PsExec designed to allow system administrators to execute commands on remote servers. Winexe is unique in that it is a GNU/Linux based client.
Tool identity and evidence
Included because the active pinned ATT&CK object has type tool. This is an upstream classification, not an assurance of benignness or a recommendation to run it.
Aliases: Winexe
Existing author guides
No reviewed association in this snapshot.
Primary documentation
No reviewed association in this snapshot.
Connected ecosystem references
Linked tags
Documented actor use
Explicit actor-to-software uses relationships in the pinned ATT&CK source. These links are historical behavior context, not attribution of current events.
- APT28 · G0007 · Pinned relationship source (relationship--80b30059-28a5-4eaa-9d7c-193875bbccd0)
- Silence · G0091 · Pinned relationship source (relationship--465385c3-8659-4225-82b3-215dfc66ba83)
- DarkVishnya · G0105 · Pinned relationship source (relationship--29b5ee68-0bb0-4264-a781-ece3014fb3dd)
Technique-specific simulations and detections
Detection links describe the associated behavior, not independently verified tool-specific signatures.
Telemetry context
Derived from the explicitly linked TTPs; not proof of sensor coverage for this tool.
Pinned research references. No browser attack runner or production-validated detector is asserted. Imported procedures remain unvalidated; any bounded lab evidence has its own scope. ATT&CK / Atomic provenance · Detection provenance.