LOLBAS. GitHub
LIVING OFF THE LAND / OS BINARIES

wt.exe

View source

Windows Terminal

Execute
01COMMAND EXAMPLES
01ATT&CK TECHNIQUES
01DETECTION RESOURCES
01CAPABILITIES
01 / TRADECRAFT

Command reference

1 examples

Execute1

EXAMPLE 01T1202

Execute a command via Windows Terminal.

COMMAND
wt.exe {CMD}
USE CASE
Use wt.exe as a proxy binary to evade defensive counter-measures
PRIVILEGES
User
OPERATING SYSTEM
Windows 11
Execute · CMD
02 / ON DISK

Known paths

C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_<version_packageid>\wt.exe
03 / DEFENSIVE INTELLIGENCE

Detection & indicators

1 resources
FURTHER READING

Research & resources

COMMUNITY RESEARCH

Acknowledgements

Nasreddine Bencherchali@nas_bench