IOC: Csc.exe should normally not run as System account unless it is used for development.
Compile
Use CSC.EXE to compile C# code stored in File.cs and output the compiled version to My.exe.
csc.exe -out:My.exe File.cs
Usecase: Compile attacker code on system. Bypass defensive counter measures.
Privileges required: User
OS: Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
MITRE ATT&CK®: T1127
Use CSC.EXE to compile C# code stored in File.cs and output the compiled version to a dll file.
csc -target:library File.cs
Usecase: Compile attacker code on system. Bypass defensive counter measures.
Privileges required: User
OS: Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
MITRE ATT&CK®: T1127