Netskope Threat Labs

CMapExec

ATP Sandbox Adv. Heuristics

CMapExec is a post-exploitation tool similar to CrackMapExec used for lateral movement.

First seen
October 2023
Last seen
October 2026
Alert Name
ByteCode-MSIL.Trojan.CMapExec
Script-PowerShell.Trojan.CMapExec
Script-Python.Trojan.CMapExec
Script.Trojan.CMapExec
Text.Trojan.CMapExec
Win32.Trojan.CMapExec
Win64.Trojan.CMapExec