RemoteUtilities is a legitimate remote administration tool that has been used by MuddyWater since at least 2021 for execution on target machines.
| Technique | Procedure example |
|---|---|
| T1083 File and Directory Discovery |
RemoteUtilities can enumerate files and directories on a target machine. |
| T1105 Ingress Tool Transfer |
RemoteUtilities can upload and download files to and from a target machine. |
| T1113 Screen Capture |
RemoteUtilities can take screenshots on a compromised host. |
| T1218.007 Msiexec |
RemoteUtilities can use Msiexec to install a service. |
None recorded.
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
