LOLBAS/yml/OSBinaries/Vbc.yml

---
Name: vbc.exe
Description: Binary file used for compile vbs code
Author: Lior Adar
Created: 27/02/2020
Commands:
  - Command: vbc.exe /target:exe c:\temp\vbs\run.vb
    Description: Binary file used by .NET to compile vb code to .exe
    Usecase: Compile attacker code on system. Bypass defensive counter measures.
    Category: Compile
    Privileges: User
    MitreID: T1127
    MitreLink: https://attack.mitre.org/techniques/T1127/
    OperatingSystem: Windows 10,7 
  - Command: vbc -reference:Microsoft.VisualBasic.dll c:\temp\vbs\run.vb
    Description: Description of the second command
    Usecase: A description of the usecase
    Category: Compile
    Privileges: User
    MitreID: T1127
    MitreLink: https://attack.mitre.org/techniques/T1127/
    OperatingSystem: Windows 10,7 
Full_Path:
  - Path: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe
  - Path: C:\Windows\Microsoft.NET\Framework64\v3.5\vbc.exe
Code_Sample: 
- Code:
Acknowledgement:
  - Person: Lior Adar
    Handle:
  - Person: Hai Vaknin(Lux)
    Handle:
---