ateShortcut(“C:\

WanaDecryptor

.exe.lnk”)&gt;&gt; m.vbs

echo om.TargetPath = “C:\

WanaDecryptor

.exe”&gt;&gt; m.vbs

echo om.Save&gt;&gt; m.vbs

cscript.exe //nologo m.vbs

del m.vbs

del /a %0

Content of ‘M.vbs’

SET ow = WScript.CreateObject(“WScript.Shell”)

SET om = ow.CreateShortcut(“C:\

WanaDecryptor

.exe.lnk”)

om.TargetPath = “C:\

WanaDecryptor

om.Save
</code></pre>
</div>

<h4 id="snort规则">SNORT规则：</h4>
<hr />
<div class="highlighter-rouge"><pre class="high