Description

The System Information Gathering feature in malware serves as an initial reconnaissance tool, collecting a wealth of details about the compromised system's hardware and software configurations. This can include data such as operating system version, installed applications, network interfaces, and even the presence of security solutions. The gathered information can be pivotal for attackers in understanding the landscape they are operating in and in identifying vulnerabilities or weak spots for further exploitation. Significantly, the details about user privileges, running processes, and system configurations can reveal opportunities for privilege escalation. By knowing what level of access is available or what security patches may be missing, attackers can tailor their subsequent actions to exploit these weak points, thus ensuring a more effective and deeper level of system compromise. In essence, System Information Gathering provides a foundational knowledge base that guides the rest of the malware's activities, making it a crucial first step in a targeted attack.

Categories Privilege Escalation, Lateral Movements, Spy / Surveillance
Dangerousness High

Existing Techniques

Name Associated Feature(s) Has Snippet Matching Sample
Hardware Information Gathering logoHardware Information Gathering System Information Gathering 0
Session Information Gathering logoSession Information Gathering System Information Gathering 0
Windows Users Enumeration logoWindows Users Enumeration System Information Gathering 0

Associated with Releases

Version Origins Authors Languages Release Date
MoSucker 3.0b logoMoSucker 3.0b Germany 🇩🇪 Superchachi Visual Basic 6 (VB6) Nov, 2002
Beast 1.90 logoBeast 1.90 Romania 🇷🇴 Tataye Delphi Dec, 2002
Turkojan 1.0 logoTurkojan 1.0 Turkey 🇹🇷 Fungus Delphi Jan, 2003
Beast 1.91 logoBeast 1.91 Romania 🇷🇴 Tataye Delphi Jan, 2003
Beast 1.92 logoBeast 1.92 Romania 🇷🇴 Tataye Delphi Feb, 2003
SubSeven 2.1.5 Legends logoSubSeven 2.1.5 Legends Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Feb, 2003
CIA 1.0 logoCIA 1.0 England 🏴󠁧󠁢󠁥󠁮󠁧󠁿 Alchemist Visual Basic 6 (VB6) Mar, 2003
Z-dem0n 1.26 logoZ-dem0n 1.26 Unknown 🏴‍☠️ ZnAsH Delphi Mar, 2003
CIA 1.1 logoCIA 1.1 England 🏴󠁧󠁢󠁥󠁮󠁧󠁿 Alchemist Visual Basic 6 (VB6) Apr, 2003
Beast 2.00 logoBeast 2.00 Romania 🇷🇴 Tataye Delphi May, 2003
Beast 2.01 logoBeast 2.01 Romania 🇷🇴 Tataye Delphi Jun, 2003
LanFiltrator 1.1 Fix 1 logoLanFiltrator 1.1 Fix 1 Australia 🇦🇺 Read101 Delphi Aug, 2003
A-311 Death 1.03 logoA-311 Death 1.03 Russia 🇷🇺 Corpse Assembly, MASM Aug, 2003
Optix Pro 1.32 logoOptix Pro 1.32 Unknown 🏴‍☠️ s13az3 , xMs Delphi Sep, 2003
CIA 1.2 logoCIA 1.2 England 🏴󠁧󠁢󠁥󠁮󠁧󠁿 Alchemist Visual Basic 6 (VB6) Sep, 2003
Beast 2.05 logoBeast 2.05 Romania 🇷🇴 Tataye Delphi Sep, 2003
Beast 2.02 logoBeast 2.02 Romania 🇷🇴 Tataye Delphi Sep, 2003
Fearless Lite 1.01 logoFearless Lite 1.01 Australia 🇦🇺, France 🇫🇷 Read101 , Triforce Delphi Nov, 2003
ProRat 1.1 logoProRat 1.1 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Jan, 2004
Hue 1.0 logoHue 1.0 Unknown 🏴‍☠️ B33T Visual Basic 6 (VB6) Jan, 2004
ProRat 1.2 logoProRat 1.2 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Jan, 2004
ProRat 1.3 logoProRat 1.3 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Feb, 2004
Nuclear RAT 1.0 Beta 5 logoNuclear RAT 1.0 Beta 5 Brazil 🇧🇷 caesar2k Delphi Feb, 2004
Beast 2.06 logoBeast 2.06 Romania 🇷🇴 Tataye Delphi Feb, 2004
ProRat 1.4 logoProRat 1.4 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Feb, 2004
LanFiltrator 1.5 Beta III logoLanFiltrator 1.5 Beta III Australia 🇦🇺 Read101 Delphi Feb, 2004
ProRat 1.6 logoProRat 1.6 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Mar, 2004
ProRat 1.8 logoProRat 1.8 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Mar, 2004
acid Drop 1.5 logoacid Drop 1.5 Unknown 🏴‍☠️ acid_alchemy Visual Basic 6 (VB6) Apr, 2004
Infector NG 2004 2.1.0 logoInfector NG 2004 2.1.0 Belgium 🇧🇪, United Kingdom 🇬🇧 fc , Infiltration Delphi May, 2004
Messiah 1.0 logoMessiah 1.0 Unknown 🏴‍☠️ Splinter Visual Basic 6 (VB6) Jul, 2004
Optix Pro 1.33 logoOptix Pro 1.33 Unknown 🏴‍☠️ s13az3 Delphi Aug, 2004
Flux 1.0 logoFlux 1.0 Sweden 🇸🇪 Gargamel C++ Aug, 2004
Beast 2.07 logoBeast 2.07 Romania 🇷🇴 Tataye Delphi Aug, 2004
Erazer 1.0 logoErazer 1.0 Austria 🇦🇹 (v)aster Delphi Aug, 2004
Messiah 2.0 logoMessiah 2.0 Unknown 🏴‍☠️ Splinter Visual Basic 6 (VB6) Aug, 2004
Erazer 1.1 logoErazer 1.1 Austria 🇦🇹 (v)aster Delphi Sep, 2004
Messiah 3.0 logoMessiah 3.0 Unknown 🏴‍☠️ Splinter Visual Basic 6 (VB6) Oct, 2004
CIA 1.3 logoCIA 1.3 England 🏴󠁧󠁢󠁥󠁮󠁧󠁿 Alchemist Visual Basic 6 (VB6) Dec, 2004
Messiah 4.0 logoMessiah 4.0 Unknown 🏴‍☠️ Splinter Visual Basic 6 (VB6) Jan, 2005
Seed 1.1 logoSeed 1.1 Brazil 🇧🇷 caesar2k Delphi, C++ Feb, 2005
ProAgent 2.0 logoProAgent 2.0 Turkey 🇹🇷 ATmaCA Borland C++ Mar, 2005
ProRat 1.9 logoProRat 1.9 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Mar, 2005
Y3K rat 2k5 RC 1.0 logoY3K rat 2k5 RC 1.0 Austria 🇦🇹 SHA Delphi Jun, 2005
Erazer Lite 0.3 logoErazer Lite 0.3 Austria 🇦🇹 (v)aster Delphi Jun, 2005
Erazer Lite 0.4 logoErazer Lite 0.4 Austria 🇦🇹 (v)aster Delphi Aug, 2005
CyberNetic 1.62 (PE) logoCyberNetic 1.62 (PE) Unknown 🏴‍☠️, Spain 🇪🇸 Cybernetic crew , mHKm , shukisnike Delphi Aug, 2005
Y3K rat 2k5 RC 1.1 logoY3K rat 2k5 RC 1.1 Austria 🇦🇹 SHA Delphi Nov, 2005
TrojNa$ 1.0 logoTrojNa$ 1.0 Unknown 🏴‍☠️, Australia 🇦🇺 flippmode , Satan_Addict , Read101 Delphi Jan, 2006
Turkojan 3.0 logoTurkojan 3.0 Turkey 🇹🇷 Fungus Delphi Sep, 2006