diff --git a/Unknown/Unknown phishing group/Analysis_29-09-2019.md b/Unknown/Unknown phishing group/Analysis_29-09-2019.md index 847c960..3334d1d 100644 --- a/Unknown/Unknown phishing group/Analysis_29-09-2019.md +++ b/Unknown/Unknown phishing group/Analysis_29-09-2019.md @@ -33,7 +33,7 @@ |get-pass-offline|Grabbing the password off all current browser| |update|run update the version of the script| |uninstall|Remove persistence + close process| -|up-n-exec|"Download and execute an executable file (Fixed URL ->""send-to-me"")"| +|up-n-exec|Download and execute an executable file (Fixed URL ->"send-to-me")| |bring-log|upload the log of the js backdoor| |down-n-exec|Download and execute an executable file (Custom URL )| |filemanager|Kill the backdoor process + download an executable file (Custom URL)|