External/APTs-Adversary-Simulation
1
0
Fork 0
mirror of https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation.git synced 2026-08-04 09:41:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
S3N4T0R
2024-09-20 19:53:48 -04:00
committed by GitHub
parent f6a64a792b
commit be0bc0e8fb
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
North Koreans APT/Labyrinth Chollima/README.md
+4 -4
View File
@@ -13,14 +13,14 @@ When accessed this way, the DLL files are loaded by the SumatraPDF.exe executabl
![imageedit_5_5991500850](https://github.com/user-attachments/assets/2c6f83ad-eab6-4445-98ec-5265d1b6dd34)
1.Create job description PDF file which will be sent spear phishing.
1. Create job description PDF file which will be sent spear phishing.
2.Use Shellter to inject DLL in the Sumatra pdf.exe which I will use in the attack through the pdf file that is used in the phishing campaign.
2. Use Shellter to inject DLL in the Sumatra pdf.exe which I will use in the attack through the pdf file that is used in the phishing campaign.
3.Executes the PDF file while simultaneously running (SumatraPDF.exe) in the background. This executable contains the DLL payload, through which I will establish the reverse connection.
3. Executes the PDF file while simultaneously running (SumatraPDF.exe) in the background. This executable contains the DLL payload, through which I will establish the reverse connection.
4.Waits for the incoming connection from the backdoor to data exfiltration when it is executed on the target machine.
4. Waits for the incoming connection from the backdoor to data exfiltration when it is executed on the target machine.