1. Home
  2. Software
  3. Systeminfo

Systeminfo

Systeminfo is a Windows utility that can be used to gather detailed information about a computer. [1]

ID: S0096
ⓘ
Type: TOOL
Version: 1.0
Created: 31 May 2017
Last Modified: 17 October 2018
Version Permalink
Enterprise Layer
download view

Techniques Used

Domain ID Name Use
Enterprise T1082 System Information Discovery

Systeminfo can be used to gather information about the operating system.[1]

Groups That Use This Software

ID Name References
G0018 admin@338

[2]
G0072 Honeybee

[3]
G0010 Turla

[4]
G0027 Threat Group-3390

[5]
G0004 Ke3chang

[6][7]
G0049 OilRig

[8]
G0019 Naikon

[9]
G0071 Orangeworm

[10]
G0016 APT29

[11]

References

  1. Microsoft. (n.d.). Systeminfo. Retrieved April 8, 2016.
  2. FireEye Threat Intelligence. (2015, December 1). China-based Cyber Threat Group Uses Dropbox for Malware Communications and Targets Hong Kong Media Outlets. Retrieved December 4, 2015.
  3. Sherstobitoff, R. (2018, March 02). McAfee Uncovers Operation Honeybee, a Malicious Document Campaign Targeting Humanitarian Aid Groups. Retrieved May 16, 2018.
  4. Kaspersky Lab's Global Research and Analysis Team. (2014, August 7). The Epic Turla Operation: Solving some of the mysteries of Snake/Uroburos. Retrieved December 11, 2014.
  5. Lunghi, D. et al. (2020, February). Uncovering DRBControl. Retrieved November 12, 2021.
  6. Villeneuve, N., Bennett, J. T., Moran, N., Haq, T., Scott, M., & Geers, K. (2014). OPERATION “KE3CHANG”: Targeted Attacks Against Ministries of Foreign Affairs. Retrieved November 12, 2014.
  1. Smallridge, R. (2018, March 10). APT15 is alive and strong: An analysis of RoyalCli and RoyalDNS. Retrieved April 4, 2018.
  2. Sardiwal, M, et al. (2017, December 7). New Targeted Attack in the Middle East by APT34, a Suspected Iranian Threat Group, Using CVE-2017-11882 Exploit. Retrieved December 20, 2017.
  3. Baumgartner, K., Golovkin, M.. (2015, May). The MsnMM Campaigns: The Earliest Naikon APT Campaigns. Retrieved April 10, 2019.
  4. Symantec Security Response Attack Investigation Team. (2018, April 23). New Orangeworm attack group targets the healthcare sector in the U.S., Europe, and Asia. Retrieved May 8, 2018.
  5. CISA. (2020, July 16). MAR-10296782-1.v1 – SOREFANG. Retrieved September 29, 2020.