1. Home
  2. Software
  3. Ping

Ping

Ping is an operating system utility commonly used to troubleshoot and verify network connections. [1]

ID: S0097
ⓘ
Associated Software: Ping
ⓘ
Type: TOOL
ⓘ
Platforms: Linux, Windows, macOS
Version: 1.0
Created: 31 May 2017
Last Modified: 17 October 2018
Enterprise Layer
download view

Techniques Used

Domain ID Name Use
Enterprise T1018 Remote System Discovery

Ping can be used to identify remote systems within a network.[1]

Groups That Use This Software

ID Name References
G0009 Deep Panda

[2]
G0045 menuPass

[3][4]
G0019 Naikon

[5][6]
G0004 Ke3chang

[7]
G0093 GALLIUM

[8]
G0096 APT41

[9][10]
G0102 Wizard Spider

[11][12][13]

References

  1. Microsoft. (n.d.). Ping. Retrieved April 8, 2016.
  2. Alperovitch, D. (2014, July 7). Deep in Thought: Chinese Targeting of National Security Think Tanks. Retrieved November 12, 2014.
  3. PwC and BAE Systems. (2017, April). Operation Cloud Hopper: Technical Annex. Retrieved April 13, 2017.
  4. FireEye iSIGHT Intelligence. (2017, April 6). APT10 (MenuPass Group): New Tools, Global Campaign Latest Manifestation of Longstanding Threat. Retrieved June 29, 2017.
  5. Baumgartner, K., Golovkin, M.. (2015, May). The MsnMM Campaigns: The Earliest Naikon APT Campaigns. Retrieved April 10, 2019.
  6. Vrabie, V. (2021, April 23). NAIKON – Traces from a Military Cyber-Espionage Operation. Retrieved June 29, 2021.
  7. Smallridge, R. (2018, March 10). APT15 is alive and strong: An analysis of RoyalCli and RoyalDNS. Retrieved April 4, 2018.
  1. Cybereason Nocturnus. (2019, June 25). Operation Soft Cell: A Worldwide Campaign Against Telecommunications Providers. Retrieved July 18, 2019.
  2. Fraser, N., et al. (2019, August 7). Double DragonAPT41, a dual espionage and cyber crime operation APT41. Retrieved September 23, 2019.
  3. Rostovcev, N. (2021, June 10). Big airline heist APT41 likely behind a third-party attack on Air India. Retrieved August 26, 2021.
  4. The DFIR Report. (2020, October 8). Ryuk’s Return. Retrieved October 9, 2020.
  5. DHS/CISA. (2020, October 28). Ransomware Activity Targeting the Healthcare and Public Health Sector. Retrieved October 28, 2020.
  6. The DFIR Report. (2020, October 18). Ryuk in 5 Hours. Retrieved October 19, 2020.