LOLBAS. GitHub
LIVING OFF THE LAND / OS BINARIES

odbcad32.exe

View source

ODBC Data Source Administrator to manage User/System DSNs and ODBC drivers.

UAC Bypass
01COMMAND EXAMPLES
01ATT&CK TECHNIQUES
00DETECTION RESOURCES
01CAPABILITIES
01 / TRADECRAFT

Command reference

1 examples

UAC Bypass1

EXAMPLE 01T1548.002

Launch odbcad32.exe GUI, click 'Tracing' tab, click 'Browsing' button, enter abitrary command in the File Dialog's path, press enter.

COMMAND
odbcad32.exe
USE CASE
Execute a binary as a high-integrity process without a UAC prompt.
PRIVILEGES
User
OPERATING SYSTEM
Windows 10, Windows 11
Execute · CMDApplication · GUI
02 / ON DISK

Known paths

c:\windows\system32\odbcad32.exe
c:\windows\syswow64\odbcad32.exe
03 / DEFENSIVE INTELLIGENCE

Detection & indicators

0 resources

Indicators & detection notes

  • IOC

    odbcad32.exe spawning unexpected child processes.

FURTHER READING

Research & resources

COMMUNITY RESEARCH

Acknowledgements

amonitoring
Ekitji@eki_erk