ipconfig — Malware Profile

ipconfig is a Windows utility that can be used to find information about a system's TCP/IP, DNS, DHCP, and adapter configuration.

MITRE ATT&CK techniques (1)

• T1016 System Network Configuration Discovery

Attributed threat actors

• MirrorFace
• Orangeworm
• OilRig
• APT29
• APT27
• HEXANE
• APT32
• GALLIUM
• APT41
• APT1
• APT35
• admin@338
• APT15
• Volt Typhoon

Read the full analysis on IntelFusions