Rare find

PSpersist. Dropping a powershell script at %HOMEPATH%\Documents\WindowsPowershell\ , that contains the implant's path , and whenever powershell process is created, the implant will be executed too.

github.com/SaadAhla/PSpersist

Vaya's read on this project

Problem, audience, market, and the verdict — sign in to see it.

Updates

No recent activity.