OSInfo
- ID
- S0165
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 20 Jan 2026
OSInfo is a custom tool used by APT3 to do internal discovery on a victim's computer and network. [1]
Techniques used (10)
- T1012 Query Registry
- T1016 System Network Configuration Discovery
- T1018 Remote System Discovery
- T1049 System Network Connections Discovery
- T1069.001 Local Groups
- T1069.002 Domain Groups
- T1082 System Information Discovery
- T1087.001 Local Account
- T1087.002 Domain Account
- T1135 Network Share Discovery