1. Home
  2. Software
  3. at

at

at is used to schedule tasks on a system to run at a specified date or time.[1][2]

ID: S0110
ⓘ
Associated Software: at.exe
ⓘ
Type: TOOL
ⓘ
Platforms: Linux, Windows, macOS
Version: 1.3
Created: 31 May 2017
Last Modified: 22 September 2022
Version Permalink
Enterprise Layer
download view

Techniques Used

Domain ID Name Use
Enterprise T1053 .002 Scheduled Task/Job: At

at can be used to schedule a task on a system to be executed at a specific date or time.[1][2]

Groups That Use This Software

ID Name References
G0093 GALLIUM

[3]
G0065 Leviathan

[4]
G0060 BRONZE BUTLER

[5]

Campaigns

ID Name Description
C0002 Night Dragon

During Night Dragon, threat actors used at to execute droppers.[6]

References

  1. Microsoft. (n.d.). At. Retrieved April 28, 2016.
  2. IEEE/The Open Group. (2017). at(1p) — Linux manual page. Retrieved February 25, 2022.
  3. Cybereason Nocturnus. (2019, June 25). Operation Soft Cell: A Worldwide Campaign Against Telecommunications Providers. Retrieved July 18, 2019.
  1. Plan, F., et al. (2019, March 4). APT40: Examining a China-Nexus Espionage Actor. Retrieved March 18, 2019.
  2. Counter Threat Unit Research Team. (2017, October 12). BRONZE BUTLER Targets Japanese Enterprises. Retrieved January 4, 2018.
  3. McAfee® Foundstone® Professional Services and McAfee Labs™. (2011, February 10). Global Energy Cyberattacks: “Night Dragon”. Retrieved February 19, 2018.