mirror of
https://github.com/FunnyWolf/Viper.git
synced 2026-10-29 12:40:12 +08:00
13 lines
405 B
Markdown
13 lines
405 B
Markdown
# Windows Registry Run Key Persistence
|
|
|
|
The module achieves persistence by writing the Trojan file path in the registry keys:
|
|
|
|
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
|
|
|
|
## Note
|
|
This method is not anti-detection.
|
|
|
|
## Operation Method
|
|
Refer to [Winlogon Helper DLL Persistence](./Persistence_WinlogonHelperDLL_Windows) |