A batch file (.bat) located in the Windows StartUp folder may be used for persistence. This procedure generates a batch file and places it in the StartUp folder. On startup, the file will execute a spawn a new Pneuma agent.
View Command
To view this TTPs command, you must be logged in with a professional or enterprise license.