diff --git a/atomics/T1072/T1072.yaml b/atomics/T1072/T1072.yaml index f2d3db4e..7a114eea 100644 --- a/atomics/T1072/T1072.yaml +++ b/atomics/T1072/T1072.yaml @@ -11,27 +11,28 @@ atomic_tests: radmin_installer: description: Radmin Viewer installer type: Path - default: '%TEMP%\RadminViewer.msi' + default: 'RadminViewer.msi' radmin_exe: description: The radmin.exe executable from RadminViewer.msi type: Path - default: '%PROGRAMFILES(x86)%/Radmin Viewer 3/Radmin.exe' - + default: 'Radmin Viewer 3/Radmin.exe' + + dependency_executor_name: powershell dependencies: - description: | Radmin Viewer Utility must be installed at specified location (#{radmin_exe}) prereq_command: | - if not exist "#{radmin_exe}" (exit /b 1) + if (Test-Path "${env:ProgramFiles(x86)}/#{radmin_exe}") {exit 0} else {exit 1} get_prereq_command: | - echo Downloading radmin installer - bitsadmin /transfer myDownloadJob /download /priority normal "https://www.radmin.com/download/Radmin_Viewer_3.5.2.1_EN.msi" #{radmin_installer} - msiexec /i "#{radmin_installer}" /qn - + Write-Host Downloading radmin installer + (New-Object Net.WebClient).DownloadFile("https://www.radmin.com/download/Radmin_Viewer_3.5.2.1_EN.msi","$ENV:Temp\#{radmin_installer}") + Write-Host Install Radmin + Start-Process msiexec -Wait -ArgumentList /i , $ENV:Temp\#{radmin_installer}, /qn executor: name: command_prompt elevation_required: true command: | - "#{radmin_exe}" + "%PROGRAMFILES(x86)%/#{radmin_exe}" - name: PDQ Deploy RAT auto_generated_guid: e447b83b-a698-4feb-bed1-a7aaf45c3443 @@ -43,24 +44,25 @@ atomic_tests: PDQ_Deploy_installer: description: PDQ Deploy Install type: Path - default: '%TEMP%\PDQDeploysetup.exe' + default: 'PDQDeploysetup.exe' PDQ_Deploy_exe: description: The PDQDeployConsole.exe executable from PDQDeploysetup.exe type: Path - default: '%PROGRAMFILES(x86)%\Admin Arsenal\PDQ Deploy\PDQDeployConsole.exe' - + default: 'Admin Arsenal/PDQ Deploy/PDQDeployConsole.exe' + + dependency_executor_name: powershell dependencies: - description: | PDQ Deploy will be installed at specified location (#{PDQ_Deploy_exe}) prereq_command: | - if not exist "#{PDQ_Deploy_exe}" (exit /b 1) + if (Test-Path "${env:ProgramFiles(x86)}/#{PDQ_Deploy_exe}") {exit 0} else {exit 1} get_prereq_command: | - echo Downloading PDQ Deploy installer - bitsadmin /transfer myDownloadJob /download /priority normal "https://download.pdq.com/release/19/Deploy_19.3.350.0.exe" #{PDQ_Deploy_installer} - msiexec /i "#{PDQ_Deploy_installer}" /qn - + Write-Host Downloading PDQ Deploy installer + (New-Object Net.WebClient).DownloadFile("https://download.pdq.com/release/19/Deploy_19.3.350.0.exe","$ENV:Temp\#{PDQ_Deploy_installer}") + Write-Host Install PDQ Deploy + Start-Process $ENV:Temp\#{PDQ_Deploy_installer} -Wait -ArgumentList "/s" executor: name: command_prompt elevation_required: true command: | - "#{PDQ_Deploy_exe}" + "%PROGRAMFILES(x86)%/#{PDQ_Deploy_exe}"