Description:ssh.exe is the OpenSSH compatible client can be used to connect to Windows 10 (build 1809 and later) and Windows Server 2019 devices.
Author:'Akshat Pradhan'
Created:'2021-11-08'
Commands:
- Command:ssh localhost calc.exe
Description:Execute calc.exe on host machine. The prompt for password can be eliminated by adding the host's public key in the user's authorized_keys file. Adversaries can do the same for execution on remote machines.
Usecase:Execute specified command, can be used for defense evasion.
Category:Execute
Privileges:User
MitreID:T1202
OperatingSystem:Windows 10 1809, Windows Server 2019