External/APTs-Adversary-Simulation
1
0
Fork 0
mirror of https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation.git synced 2026-08-04 09:41:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
S3N4T0R
2024-12-29 07:36:52 -05:00
committed by GitHub
parent 7d4add8118
commit 1e7bbd1bfd
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Chinese APT/Wicked Panda/README.md
+5
View File
@@ -107,6 +107,9 @@ This payload is a malicious program that establishes a reverse shell to an attac
Opens a cmd.exe process on the victim's machine. Opens a cmd.exe process on the victim's machine.
Sends commands received from the attacker to the shell and returns the output to the attacker. Sends commands received from the attacker to the shell and returns the output to the attacker.
![Screenshot From 2024-12-29 07-31-37](https://github.com/user-attachments/assets/c8a504c7-e77a-4005-a3ad-03e33fa86943)
2. Persistence Mechanism: 2. Persistence Mechanism:
Registry Manipulation: Registry Manipulation:
@@ -117,3 +120,5 @@ This payload is a malicious program that establishes a reverse shell to an attac
3. Networking: 3. Networking:
Uses Windows' Winsock API to set up the socket connection to the attacker. Uses Windows' Winsock API to set up the socket connection to the attacker.
## Final result: payload connect to OneDrive C2 server