diff --git a/atomics/Indexes/index.yaml b/atomics/Indexes/index.yaml index 33e29698..0d8f0c7c 100644 --- a/atomics/Indexes/index.yaml +++ b/atomics/Indexes/index.yaml @@ -8069,10 +8069,9 @@ defense-evasion: {exit 0} else {exit 1} ' - get_prereq_command: 'Invoke-WebRequest -OutFile "PathToAtomicsFolder\..\ExternalPayloads\T1036.zip" - #{url} - - ' + get_prereq_command: "New-Item -Type Directory \"PathToAtomicsFolder\\..\\ExternalPayloads\\\" + -ErrorAction ignore -Force | Out-Null\nInvoke-WebRequest #{url} -OutFile + \"PathToAtomicsFolder\\..\\ExternalPayloads\\T1036.zip\" \n" executor: command: |- Expand-Archive -Path "PathToAtomicsFolder\..\ExternalPayloads\T1036.zip" -DestinationPath "$env:userprofile\Downloads\T1036" -Force diff --git a/atomics/Indexes/windows-index.yaml b/atomics/Indexes/windows-index.yaml index 886840fa..e685dd93 100644 --- a/atomics/Indexes/windows-index.yaml +++ b/atomics/Indexes/windows-index.yaml @@ -6487,10 +6487,9 @@ defense-evasion: {exit 0} else {exit 1} ' - get_prereq_command: 'Invoke-WebRequest -OutFile "PathToAtomicsFolder\..\ExternalPayloads\T1036.zip" - #{url} - - ' + get_prereq_command: "New-Item -Type Directory \"PathToAtomicsFolder\\..\\ExternalPayloads\\\" + -ErrorAction ignore -Force | Out-Null\nInvoke-WebRequest #{url} -OutFile + \"PathToAtomicsFolder\\..\\ExternalPayloads\\T1036.zip\" \n" executor: command: |- Expand-Archive -Path "PathToAtomicsFolder\..\ExternalPayloads\T1036.zip" -DestinationPath "$env:userprofile\Downloads\T1036" -Force diff --git a/atomics/T1036/T1036.md b/atomics/T1036/T1036.md index 28a3ee57..53167389 100644 --- a/atomics/T1036/T1036.md +++ b/atomics/T1036/T1036.md @@ -91,7 +91,8 @@ if (Test-Path "PathToAtomicsFolder\..\ExternalPayloads\T1036.zip") {exit 0} else ``` ##### Get Prereq Commands: ```powershell -Invoke-WebRequest -OutFile "PathToAtomicsFolder\..\ExternalPayloads\T1036.zip" #{url} +New-Item -Type Directory "PathToAtomicsFolder\..\ExternalPayloads\" -ErrorAction ignore -Force | Out-Null +Invoke-WebRequest #{url} -OutFile "PathToAtomicsFolder\..\ExternalPayloads\T1036.zip" ```