cmd

cmd is the Windows command-line interpreter that can be used to interact with systems and execute other processes and utilities. [1]

Cmd.exe contains native functionality to perform many operations to interact with the system, including listing files in a directory (e.g., dir [2]), deleting files (e.g., del [3]), and copying files (e.g., copy [4]).

ID: S0106
Aliases: cmd, cmd.exe
Type: TOOL
Platforms: Windows

Version: 1.0

Techniques Used

DomainIDNameUse
EnterpriseT1059Command-Line Interfacecmd is used to execute programs and other actions at the command-line interface.[1]
EnterpriseT1083File and Directory Discoverycmd can be used to find files and directories with native functionality such as dir commands.[2]
EnterpriseT1107File Deletioncmd can be used to delete files from the file system.[3]
EnterpriseT1105Remote File Copycmd can be used to copy files to a remotely connected system.[4]
EnterpriseT1082System Information Discoverycmd can be used to find information about the operating system.[2]

Groups

Groups that use this software:

APT18
BRONZE BUTLER
Honeybee
menuPass
Orangeworm

References