.. /DefaultPack.EXE
Star

Execute

This binary can be downloaded along side multiple software downloads on the microsoft website. It gets downloaded when the user forgets to uncheck the option to set Bing as the default search provider.


Paths:

Resources:
Acknowledgements:

Detection:

Execute

  1. Use DefaultPack.EXE to execute arbitrary binaries, with added argument support.

    DefaultPack.EXE /C:"process.exe args"
    Use case
    Can be used to execute stagers, binaries, and other malicious commands.
    Privileges required
    User
    Operating systems
    Windows
    ATT&CK® technique
    T1218