mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2025-07-27 04:32:24 +02:00
Standardise date formats (see https://yaml.org/type/timestamp.html)
This commit is contained in:
@@ -2,7 +2,7 @@
|
||||
Name: DefaultPack.EXE
|
||||
Description: This binary can be downloaded along side multiple software downloads on the microsoft website. It gets downloaded when the user forgets to uncheck the option to set Bing as the default search provider.
|
||||
Author: '@checkymander'
|
||||
Created: '2020-10-01'
|
||||
Created: 2020-10-01
|
||||
Commands:
|
||||
- Command: DefaultPack.EXE /C:"process.exe args"
|
||||
Description: Use DefaultPack.EXE to execute arbitrary binaries, with added argument support.
|
||||
@@ -14,9 +14,9 @@ Commands:
|
||||
OperatingSystem: Windows
|
||||
Full_Path:
|
||||
- Path: C:\Program Files (x86)\Microsoft\DefaultPack\
|
||||
Code_Sample:
|
||||
Code_Sample:
|
||||
- Code:
|
||||
Detection:
|
||||
Detection:
|
||||
- IOC: DefaultPack.EXE spawned an unknown process
|
||||
Resources:
|
||||
- Link: https://twitter.com/checkymander/status/1311509470275604480.
|
||||
|
Reference in New Issue
Block a user