Reg

MITRE

Malware Type:
Tool

First seen:
Unknown

Last seen:
Unknown

Details:

[Reg](https://attack.mitre.org/software/S0075) is a Windows utility used to interact with the Windows Registry. It can be used at the command-line interface to query, add, modify, and remove information. (Citation: Microsoft Reg)

Utilities such as [Reg](https://attack.mitre.org/software/S0075) are known to be used by persistent threats. (Citation: Windows Commands JPCERT)

Associated Techniques (3)

ID	ATT&CK	Tactics
T1012	Query Registry	-
T1112	Modify Registry	-
T1552.002	Credentials in Registry	-

Aliases (105)

reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe reg.exe

Used by Actors (8)

Daggerfly
Unknown

Dragonfly
Unknown

GALLIUM
Unknown

Gamaredon Group
Unknown

OilRig
Nation-state

RANCOR
Nation-state

Turla
Nation-state

Volt Typhoon
Unknown

Metadata

ID:	772
Created:	13/01/2026 17:48
Updated:	06/03/2026 16:00