Skip to content
Threat Feed
Subscribe

Tag

Gootloader

1 brief RSS
high threat

Detection of Base64 Encoded PowerShell Invoke- Keywords

This brief details the detection of Base64 encoded PowerShell `Invoke-` keywords in command lines, a common stealth technique leveraged by malware families such as Gootloader for initial access, execution, and subsequent payload delivery, enabling evasive command and control.

Gootloader powershell obfuscation evasion windows execution initial-access
1r 5t