Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
  • Loading branch information
Neo23x0 committed Sep 8, 2021
2 parents efb972e + e3d378b commit 09a8aac
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion test-sets/cobaltstrike/cobaltstrike-simulation.bat
Original file line number Diff line number Diff line change
Expand Up @@ -43,7 +43,7 @@ ECHO Copy a service binary file to a suspicious location ...
ECHO Using Post-CobaltStrike 4.2 scheme
copy "%APTDIR%\CreateNamedPipe.exe" \\%COMPUTERNAME%\ADMIN$\b6a1458f396.exe
ECHO Starting suspicious service
sc create tbbd05 binpath= "%%COMSPEC%% echo /c b6a1458f396 > \\.\pipe\334485" DisplayName= "tbbd05" start= demand
sc create tbbd05 binpath= "%%COMSPEC%% /c echo b6a1458f396 > \\.\pipe\334485" DisplayName= "tbbd05" start= demand
sc start tbbd05
sc stop tbbd05
sc delete tbbd05
Expand Down

0 comments on commit 09a8aac

Please sign in to comment.