Matt Kelly
3b6efc7bd5
There is no remote option for CMSTP INF files, only a local based INF file that then calls a remote file.
16 lines
366 B
Markdown
16 lines
366 B
Markdown
## CMSTP
|
|
|
|
MITRE ATT&CK Technique: [T1191](https://attack.mitre.org/wiki/Technique/T1191)
|
|
|
|
### Scriptlet execution
|
|
|
|
Local:
|
|
|
|
cmstp.exe /s CMSTP.inf
|
|
|
|
## Test Script
|
|
|
|
[CMSTP.INF](https://github.com/redcanaryco/atomic-red-team/blob/master/Windows/Payloads/CMSTP.inf)
|
|
|
|
[CMSTP.SCT](https://github.com/redcanaryco/atomic-red-team/blob/master/Windows/Payloads/CMSTP.sct)
|