Source
https://sansec.io/research/cronrat
Manipulated code sample, they say they cleaned it up…
https://gist.github.com/gwillem/fbe3e6b98e2e10d7f1f271ca4b6e813f#file-cronrat-annotated-sh
Source
https://sansec.io/research/cronrat
Manipulated code sample, they say they cleaned it up…
https://gist.github.com/gwillem/fbe3e6b98e2e10d7f1f271ca4b6e813f#file-cronrat-annotated-sh
Yeah, that article is really sparse on details