.. /Odbcconf.exe
Star

Execute (DLL)

Used in Windows for managing ODBC connections

Paths:

Resources:

Acknowledgements:

Detections:

Execute

  1. Execute DllRegisterServer from DLL specified.

    odbcconf /a {REGSVR {PATH_ABSOLUTE:.dll}}
    Use case

    Execute a DLL file using technique that can evade defensive counter measures

    Privileges required
    User
    Operating systems
    Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
    ATT&CK® technique
    T1218.008
    Tags
    Execute: DLL

  2. Install a driver and load the DLL. Requires administrator privileges.

    odbcconf INSTALLDRIVER "lolbas-project|Driver={PATH_ABSOLUTE:.dll}|APILevel=2"
odbcconf configsysdsn "lolbas-project" "DSN=lolbas-project"
    Use case

    Execute dll file using technique that can evade defensive counter measures

    Privileges required
    User
    Operating systems
    Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
    ATT&CK® technique
    T1218.008
    Tags
    Execute: DLL

  3. Load DLL specified in target .RSP file. See the Code Sample section for an example .RSP file.

    odbcconf -f {PATH:.rsp}
    Use case

    Execute dll file using technique that can evade defensive counter measures

    Privileges required
    Administrator
    Operating systems
    Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
    ATT&CK® technique
    T1218.008