Static task
static1
Behavioral task
behavioral1
Sample
Invoke-Stealth.ps1
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Invoke-Stealth.ps1
Resource
win10v2004-20230703-en
General
-
Target
Invoke-Stealth.ps1
-
Size
7KB
-
MD5
fcce5e49e8e8ba0ed298b10a5d4dddcc
-
SHA1
d4a3a22e474d20431e38973533cfa6cb6a02e7b4
-
SHA256
2ba17d622736a4d3132c17db3b8c725f001fdbe7fca4b9b4248262b5e54a4107
-
SHA512
0d19de95fe5d0e8d493bd910c7ff5079be3ab205bb351ec564022b9a3088f3e0cfe3438c8bc6dc51bd70b2cb18c831c95d92ea8b6c827cabe04cf37870c29f19
-
SSDEEP
192:r1HBtyE8wSd7PD5GL1lOiqPAMVDAzbuWR:JhtyE8wSd7r5ulOnPAEAXR
Malware Config
Extracted
https://raw.githubusercontent.com/JoelGMSec/Invoke-Stealth/master/Resources/PSObfuscation/Invoke-PSObfuscation.ps1
https://raw.githubusercontent.com/JoelGMSec/Invoke-Stealth/main/Resources/BetterXencrypt/BetterXencrypt.ps1
Signatures
Files
-
Invoke-Stealth.ps1.ps1