Static task
static1
Behavioral task
behavioral1
Sample
Invoke-Stealth.ps1
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Invoke-Stealth.ps1
Resource
win10v2004-20231215-en
General
-
Target
Invoke-Stealth.ps1
-
Size
8KB
-
MD5
19a616611ef6bbcf453434cb1434403a
-
SHA1
17ed4d067abeb2184573f41594f68a16314b8660
-
SHA256
647153b42b9409b46c3f79cf6980f92bd68b0b4aea33534bcf4eec5b475bd53b
-
SHA512
ead2b796d6847caf8e37f795293944517ecfcdedc916441e88ebfabb43eda237eaad4653084a30f14e3abd72894c800a4b52d5b08f4c7e37eedb587fce9c47a1
-
SSDEEP
192:jyXtyErdTwN2e+eosLWpIuAxXPVXqPjYK:jCtyErdTwNgeovp49PV6PjYK
Malware Config
Extracted
https://raw.githubusercontent.com/JoelGMSec/Invoke-Stealth/master/Resources/PSObfuscation/Invoke-PSObfuscation.ps1
https://raw.githubusercontent.com/JoelGMSec/Invoke-Stealth/master/Resources/BetterXencrypt/BetterXencrypt.ps1
Signatures
Files
-
Invoke-Stealth.ps1.ps1