External/APTs-Adversary-Simulation
1
0
Fork 0
mirror of https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation.git synced 2026-08-04 09:41:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
S3N4T0R
2025-07-06 10:08:58 -04:00
committed by GitHub
parent 8830c9a8db
commit cb2861adba
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
North Koreans APT/Famous Chollima/README.md
+10
View File
@@ -82,6 +82,16 @@ The attackers created a simple payload that performs two main tasks:
![Screenshot From 2025-07-06 06-00-57](https://github.com/user-attachments/assets/556f4607-9445-4c33-8f89-34a14dce1fa1)
This Python payload creates a reverse TCP shell that connects to a command-and-control (C2) server.
1. The script imports libraries for socket communication, subprocess execution, base64 encoding, and web browser interaction.
2. It defines XOR encryption/decryption functions to secure data exchange with a hardcoded key (22).
3. Upon execution, it opens url in a web browser and establishes a TCP connection to a specified C2 server (ip:port).
4. The script authenticates with the server, receives encrypted commands, executes them locally, and sends back encrypted results.
![Screenshot From 2025-07-06 10-07-50](https://github.com/user-attachments/assets/ae59d553-e8bd-4ce9-bd6c-be382d471c99)