216.73.217.22

Arp

The MITRE Corporation · Published 31/05/2017 23:33 · Modified 27/03/2026 01:07

Essential information

Confidence
100/100
Published
31/05/2017 23:33
Modified
27/03/2026 01:07
Revoked
No
Author / Source
The MITRE Corporation
Related entities
2 attack patterns (mitre), 4 intrusion sets (apt), 3 campaign, 3 campaigns

Aliases

arp.exe

Description

[Arp](https://attack.mitre.org/software/S0099) displays and modifies information about a system's Address Resolution Protocol (ARP) cache. (Citation: TechNet Arp)

Marking (TLP)

Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.

External references

Related entities

Attack patterns, malware, vulnerabilities, indicators, intrusion sets, tools and other entities linked to this tool.

Attack patterns (MITRE) (2)

  • T1018 uses
    Remote System Discovery
  • T1016 uses
    System Network Configuration Discovery

Intrusion sets (APT) (4)

  • APT32 uses SeaLotusAPT-C-00
    The MITRE Corporation Confidence 100

    [APT32](https://attack.mitre.org/groups/G0050) is a suspected Vietnam-based threat group that has been active since at least 2014. The group has targeted multiple private sector industries as well as foreign governments, …

    First seen 01/01/1970 · Last seen 16/11/5138 Published 16/12/2025 19:39 · Modified 27/03/2026 01:13
  • BlackByte uses Hecamede
    The MITRE Corporation Confidence 100

    [BlackByte](https://attack.mitre.org/groups/G1043) is a ransomware threat actor operating since at least 2021. [BlackByte](https://attack.mitre.org/groups/G1043) is associated with several versions of ransomware also labeled [BlackByte Ransomware](https://attack.mitre.org/software/S1180). [BlackByte](https://attack.mitre.org/groups/G1043) ransomware operations initially used …

    First seen 01/01/1970 · Last seen 16/11/5138 Published 16/12/2025 19:39 · Modified 27/03/2026 01:14
  • Orangeworm uses
    The MITRE Corporation Confidence 100

    [Orangeworm](https://attack.mitre.org/groups/G0071) is a group that has targeted organizations in the healthcare sector in the United States, Europe, and Asia since at least 2015, likely for the purpose of …

    First seen 01/01/1970 · Last seen 16/11/5138 Published 16/12/2025 19:39 · Modified 27/03/2026 01:14
  • Turla uses IRON HUNTERGroup 88
    The MITRE Corporation Confidence 100

    [Turla](https://attack.mitre.org/groups/G0010) is a cyber espionage threat group that has been attributed to Russia's Federal Security Service (FSB). They have compromised victims in over 50 countries since at least …

    First seen 01/01/1970 · Last seen 16/11/5138 Published 16/12/2025 19:39 · Modified 04/05/2026 16:33

Campaign (3)

  • C0026 uses
  • 2025 Poland Wiper Attacks uses
  • Operation AkaiRyū uses

Campaigns (3)

  • C0026
  • 2025 Poland Wiper Attacks
  • Operation AkaiRyū