diff --git a/yml/OSBinaries/Wuauclt.yml b/yml/OSBinaries/Wuauclt.yml index 3e5df11..c5608aa 100644 --- a/yml/OSBinaries/Wuauclt.yml +++ b/yml/OSBinaries/Wuauclt.yml @@ -4,12 +4,12 @@ Description: Windows Update Client Author: 'David Middlehurst' Created: 2020-09-23 Commands: - - Command: wuauclt.exe /UpdateDeploymentProvider /RunHandlerComServer + - Command: wuauclt.exe /UpdateDeploymentProvider Full_Path_To_DLL /RunHandlerComServer Description: Full_Path_To_DLL would be the abosolute path to .DLL file and would execute code on attach. Usecase: Execute dll via attach/detach methods Category: Execute Privileges: User - MitreID: T1218.011 + MitreID: T1218 OperatingSystem: Windows 10 Full_Path: - Path: C:\Windows\System32\wuauclt.exe