Extracted

• • Target
    stealss.bat
  • Size 723B
  • SHA256 ebad25dbd558b23bd6cad5852d98426b9e75e1f4181bf503fa498ad9780ec9fc
  • MD5 051083e2d0f0ae7576b6996972998bac
  • SHA1 8fc8c885c3d913889c378f696cae28fb3a36434b
  • SHA512 ab75e8cdd2436c29f00bdc0a3155a6de066a1a31cb2f3bf2522229dd631a918b25989ec6b5f1f29c3b9eb6eaac9d6cb38cbc6cf4dd63d10841f27532eb7fbbe7
  • TLSH
    T18B0110262D19ECCC0A4AAD7884D47670445B138BC73077C5F5F4B8B2251621CCFA17DC
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  defense_evasionexecution

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution

  • Indicator Removal: File Deletion

    Adversaries may delete files left behind by the actions of their intrusion activity.

    defense_evasion
  behavioral1behavioral2