MITRE ATT&CKsoftware (tool)

S0075 Reg

Published 2017-05-31 Modified 2025-04-16 Official page ↗

Domain: enterprise
Platforms: Windows
Aliases: reg.exe
Version: 1.1
Created: 2017-05-31

Description

Reg is a Windows utility used to interact with the Windows Registry. It can be used at the command-line interface to query, add, modify, and remove information. Utilities such as Reg are known to be used by persistent threats.

Uses · MITRE ATT&CK (3)

T1552.002 Credentials in Registry sub-technique
T1012 Query Registry technique
T1112 Modify Registry technique

Referenced by MITRE ATT&CK · uses (9)

G1034 Daggerfly group
G1017 Volt Typhoon group
C0006 Operation Honeybee campaign
G0093 GALLIUM group
G0075 Rancor group
G0049 OilRig group
G0010 Turla group
G0035 Dragonfly group
G0047 Gamaredon Group group

References

https://technet.microsoft.com/en-us/library/cc732643.aspx Microsoft Reg
https://blogs.jpcert.or.jp/en/2016/01/windows-commands-abused-by-attackers.html Windows Commands JPCERT

S0075 Reg

Description

Related

Uses · MITRE ATT&CK (3)

Referenced by MITRE ATT&CK · uses (9)

References