KuinaExtractor Hardware Enumeration via WMIC — T1082 System Info Discovery

Ankit Mehta@Secvyn

•updated Jun 29, 2026•0•0•1

Detects reconnaissance behavior associated with the KuinaExtractor tool, identified by three or more distinct WMI hardware-related queries (CPU, disk, memory, etc.) executed within a 5-minute window by a non-administrative parent process.