LOLBAS/yml/OSBinaries/Pnputil.yml

23 lines
619 B
YAML
Raw Normal View History

2021-01-21 22:48:05 +01:00
---
Name: Pnputil.exe
2021-11-05 19:58:26 +01:00
Description: Used for installing drivers
2021-01-21 22:48:05 +01:00
Author: Hai vaknin (lux)
2021-11-05 19:58:26 +01:00
Created: 2020-12-25
2021-01-21 22:48:05 +01:00
Commands:
- Command: pnputil.exe -i -a C:\Users\hai\Desktop\mo.inf
2021-11-05 19:58:26 +01:00
Description: Used for installing drivers
Usecase: Aadd malicious driver
2021-01-21 22:54:58 +01:00
Category: Execute
2021-01-21 22:48:05 +01:00
Privileges: Administrator
2021-11-05 19:58:26 +01:00
MitreID: T1547.006
OperatingSystem: Windows 10,7
2021-01-21 22:48:05 +01:00
Full_Path:
- Path: C:\Windows\system32\pnputil.exe
Code_Sample: https://github.com/LuxNoBulIshit/test.inf/blob/main/inf
Acknowledgement:
2021-11-05 19:58:26 +01:00
- Person: Hai Vaknin(Lux)
Handle: '@LuxNoBulIshit'
2021-01-21 22:48:05 +01:00
- Person: Avihay eldad
2021-11-05 19:58:26 +01:00
Handle: '@aloneliassaf'
2021-01-21 22:48:05 +01:00
---