Systeminfo
Software · ATTACK:enterprise:S0096
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0096",
"title": "Systeminfo",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0096",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "tool--7fcbc4e8-1989-441f-9ac5-e7b6ff5806f1",
"external_id": "S0096",
"domain": "enterprise",
"created": "2017-05-31T21:33:00.969Z",
"modified": "2025-04-16T20:38:53.231Z",
"version": "1.2",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "TechNet Systeminfo",
"url": "https://technet.microsoft.com/en-us/library/bb491007.aspx"
}
]
}Explicit source assertions (14)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:G0049 → uses → ATTACK:enterprise:S0096
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0e6d61e2-7b61-4b6c-85c7-7779125c1d14
FireEye APT34 Dec 2017ATTACK:enterprise:G0004 → uses → ATTACK:enterprise:S0096
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--301de16e-3829-4fb0-b217-dcdfca7398c9
Mandiant Operation Ke3chang November 2014 · NCC Group APT15 Alive and StrongATTACK:enterprise:G0027 → uses → ATTACK:enterprise:S0096
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--30ba627f-f567-444c-9c48-39db264ca78b
Trend Micro DRBControl February 2020ATTACK:enterprise:G0018 → uses → ATTACK:enterprise:S0096
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--318afc9f-92f3-4262-af70-b2e045b87737
FireEye admin@338ATTACK:enterprise:G0019 → uses → ATTACK:enterprise:S0096
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4b521c7b-c66b-4bbc-847e-d6a13e9ae62c
Baumgartner Naikon 2015ATTACK:enterprise:C0007 → uses → ATTACK:enterprise:S0096
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6aeb6489-91f4-458c-b7f1-15b4025ee3fa
Bitdefender FunnyDream Campaign November 2020ATTACK:enterprise:G0059 → uses → ATTACK:enterprise:S0096
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--703694f1-755e-4e3f-aff2-f623ec842693
DFIR Phosphorus November 2021ATTACK:enterprise:G0010 → uses → ATTACK:enterprise:S0096
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8cdfc8e4-b657-4ae9-b9ee-9b6107fae796
ESET Turla Lunar toolset May 2024 · Kaspersky TurlaATTACK:enterprise:C0012 → uses → ATTACK:enterprise:S0096
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--913d20d5-aea1-49bc-826a-90b8697d691d
Cybereason OperationCuckooBees May 2022ATTACK:enterprise:S0096 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c088f23e-b741-453c-a710-01990dead853
TechNet SysteminfoATTACK:enterprise:C0006 → uses → ATTACK:enterprise:S0096
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c4880d8d-3d07-49f6-875b-00b573faebf3
McAfee HoneybeeATTACK:enterprise:G0016 → uses → ATTACK:enterprise:S0096
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c8a02e92-6b53-4c1f-ae1f-bebedd6bedc7
CISA SoreFang July 2016ATTACK:enterprise:G0071 → uses → ATTACK:enterprise:S0096
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ccdb0aac-24b8-4e94-a3b6-b7e1c519a938
Symantec Orangeworm April 2018ATTACK:enterprise:G1017 → uses → ATTACK:enterprise:S0096
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d3269fe9-f90f-4714-bee5-836072e9ad6f
CISA AA24-038A PRC Critical Infrastructure February 2024 · Secureworks BRONZE SILHOUETTE May 2023 · Joint Cybersecurity Advisory Volt Typhoon June 2023