Used in Windows for managing ODBC connections

Paths:

C:\Windows\System32\odbcconf.exe
C:\Windows\SysWOW64\odbcconf.exe

Detection:

Execute

Load DLL specified in target .RSP file. See the Playloads folder for an example .RSP file.

odbcconf -f file.rsp

Execute DllREgisterServer from DLL specified.

odbcconf /a {REGSVR c:\test\test.dll}