Windows

MSAccess.exeMSAccess.exe

Platform
Windows
Abuse functions
1
Mapped techniques
1

Description

MSAccess.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITRE crosswalk): T1105. Defenders should monitor execution of MSAccess.exe under non-administrative or sudo contexts and alert when its arguments match the abuse-function signatures.

Abuse functions· 1

DownloadT1105

It will download a remote payload (if it has the filename extension .mdb) and place it in INetCache.

MITRE ATT&CK techniques· 1

T1105

Uses1

TypeTargetConfidenceTier
TechniqueIngress Tool Transfert1105100%live

Abuses1

TypeTargetConfidenceTier
TechniqueIngress Tool Transfert110585%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

LOLbin
Query.exe
LOLbin
Excel.exe
LOLbin
Mspub.exe
LOLbin
At.exe
LOLbin
msxsl.exe
LOLbin
Msconfig.exe
Sourced from LOLBAS Project. Curated by Adam Lundqvist, SQUR.