General

  • Target

    Invoke-Stealth.ps1

  • Size

    7KB

  • MD5

    fcce5e49e8e8ba0ed298b10a5d4dddcc

  • SHA1

    d4a3a22e474d20431e38973533cfa6cb6a02e7b4

  • SHA256

    2ba17d622736a4d3132c17db3b8c725f001fdbe7fca4b9b4248262b5e54a4107

  • SHA512

    0d19de95fe5d0e8d493bd910c7ff5079be3ab205bb351ec564022b9a3088f3e0cfe3438c8bc6dc51bd70b2cb18c831c95d92ea8b6c827cabe04cf37870c29f19

  • SSDEEP

    192:r1HBtyE8wSd7PD5GL1lOiqPAMVDAzbuWR:JhtyE8wSd7r5ulOnPAEAXR

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
ps1.dropper

https://raw.githubusercontent.com/JoelGMSec/Invoke-Stealth/master/Resources/PSObfuscation/Invoke-PSObfuscation.ps1

exe.dropper

https://raw.githubusercontent.com/JoelGMSec/Invoke-Stealth/main/Resources/BetterXencrypt/BetterXencrypt.ps1

Signatures

Files

  • Invoke-Stealth.ps1
    .ps1