From 615dd804f2ca8684ce2e5d2bd29a963e08b80fc1 Mon Sep 17 00:00:00 2001
From: hegusung <7390383+hegusung@users.noreply.github.com>
Date: Sun, 13 Oct 2024 17:22:53 +0200
Subject: [PATCH] Update Vbc.yml Tags

Removed Execute Tags as it is a compilation
---
 yml/OSBinaries/Vbc.yml | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/yml/OSBinaries/Vbc.yml b/yml/OSBinaries/Vbc.yml
index 0511e95..4ede887 100644
--- a/yml/OSBinaries/Vbc.yml
+++ b/yml/OSBinaries/Vbc.yml
@@ -11,8 +11,6 @@ Commands:
     Privileges: User
     MitreID: T1127
     OperatingSystem: Windows 7, Windows 10, Windows 11
-    Tags:
-      - Execute: WSH
   - Command: vbc -reference:Microsoft.VisualBasic.dll c:\temp\vbs\run.vb
     Description: Binary file used by .NET to compile Visual Basic code to an executable.
     Usecase: Compile attacker code on system. Bypass defensive counter measures.
@@ -20,8 +18,6 @@ Commands:
     Privileges: User
     MitreID: T1127
     OperatingSystem: Windows 7, Windows 10, Windows 11
-    Tags:
-      - Execute: WSH
 Full_Path:
   - Path: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe
   - Path: C:\Windows\Microsoft.NET\Framework\v3.5\vbc.exe