T1218.013 System Binary Proxy Execution: Mavinject

Adversaries may abuse mavinject.exe to proxy execution of malicious code. MITRE ATT&CK

1 program on CmdID 2 Sigma rules T1218.013 on attack.mitre.org

Part of

MITRE ATT&CK

T1218System Binary Proxy Execution

documented by LOLBAS and GTFOBins, or named by its rules

process creation, the highest levels first

highRenamed Mavinject.EXE Executionfrack113, Florian Roth · Windows