How to use for .bat/.hta file
katesaikishore opened this issue · 1 comments
katesaikishore commented
I want embed the rat with MS Office where the rat is hidden in the form of .bat and .hta how to use EvilClippy to make sure that these files binds and run the exploit successfully?
stanhegt commented
You can embed your second stage payload (.bat or .hta) in VBA and drop it on disk with the same macro, for example. The VBA can be hidden with EvilClippy.
Example dropper code can be found here: https://github.com/sevagas/macro_pack/blob/master/resources/community/dropper.vba
If you're talking about OLE embedding then EvilClippy is not scoped towards this.