MCMD — Attack Tool

MCMD is a remote access tool that provides remote command shell capability used by Dragonfly.

Tool identity and evidence

Included because the active pinned ATT&CK object has type tool. This is an upstream classification, not an assurance of benignness or a recommendation to run it.

Aliases: MCMD

Primary tool reference

Existing author guides

No reviewed association in this snapshot.

Primary documentation

No reviewed association in this snapshot.

Connected ecosystem references

Linked tags

attack_tool attack_uses

Documented actor use

Explicit actor-to-software uses relationships in the pinned ATT&CK source. These links are historical behavior context, not attribution of current events.

Dragonfly · G0035 · Pinned relationship source (relationship--18210ad3-d5ed-414e-9b7d-04fc622dc2e9)

Technique-specific simulations and detections

Detection links describe the associated behavior, not independently verified tool-specific signatures.

Pinned research references. No browser attack runner, live simulation result or validated detector is asserted. Source mappings and validation limits are preserved. ATT&CK / Atomic provenance · Detection provenance.