Bugfix for monkey binary removal if dropper fails to do so

This commit is contained in:
VakarisZ 2020-11-27 17:48:00 +02:00 committed by Shreya Malviya
parent d203b28a38
commit 55a817931d
1 changed files with 1 additions and 2 deletions

View File

@ -202,7 +202,7 @@ class MonkeyDrops(object):
) )
# mark the file for removal on next boot # mark the file for removal on next boot
dropper_source_path_ctypes = c_char_p(self._config["source_path"]) dropper_source_path_ctypes = c_char_p(self._config["source_path"].encode())
if 0 == ctypes.windll.kernel32.MoveFileExA( if 0 == ctypes.windll.kernel32.MoveFileExA(
dropper_source_path_ctypes, None, MOVEFILE_DELAY_UNTIL_REBOOT dropper_source_path_ctypes, None, MOVEFILE_DELAY_UNTIL_REBOOT
): ):
@ -218,7 +218,6 @@ class MonkeyDrops(object):
self._config["source_path"], self._config["source_path"],
) )
T1106Telem(ScanStatus.USED, UsageEnum.DROPPER_WINAPI).send() T1106Telem(ScanStatus.USED, UsageEnum.DROPPER_WINAPI).send()
LOG.info("Dropper cleanup complete") LOG.info("Dropper cleanup complete")
except AttributeError: except AttributeError:
LOG.error("Invalid configuration options. Failing") LOG.error("Invalid configuration options. Failing")