Windows

Regini.exeRegini.exe

Platform
Windows
Abuse functions
1
Mapped techniques
1

Description

Regini.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITRE crosswalk): T1564.004. Defenders should monitor execution of Regini.exe under non-administrative or sudo contexts and alert when its arguments match the abuse-function signatures.

Abuse functions· 1

Write to registry

MITRE ATT&CK techniques· 1

T1564.004

Uses1

TypeTargetConfidenceTier
SubTechniqueNTFS File Attributest1564.004100%live

Abuses1

TypeTargetConfidenceTier
SubTechniqueNTFS File Attributest1564.00490%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

LOLbin
Reg.exe
LOLbin
Regedit.exe
LOLbin
Regasm.exe
LOLbin
Regsvr32.exe
LOLbin
Regsvcs.exe
LOLbin
Setres.exe
Sourced from LOLBAS Project. Curated by Adam Lundqvist, SQUR.