Forum Discussion

ray96's avatar
ray96
Icon for Bronze II rankBronze II
2 months ago
Solved

Powershell Deobsfuscation Ep.7

I was working on this and got stuck with Ep.7. Appreciate if anyone can assist with this Powershell de-obfuscation. Step 1: I removed the splits accordingly and converted from hexadecimal Step ...
defensive cyber
offensive cyber
  • PRABAKARANRAMAMURTHY's avatar
    PRABAKARANRAMAMURTHY
    12 days ago

    TillyCorless​ got it done. Could not deob it using CyberChef, used PowerShell commands to run the part that I can't deob earlier and saved the output in another txt file. I removed the IEX part from the script before execution. That worked for me!

PRABAKARANRAMAMURTHY's avatar
PRABAKARANRAMAMURTHY
Icon for Bronze II rankBronze II
12 days ago

TillyCorless​ got it done. Could not deob it using CyberChef, used PowerShell commands to run the part that I can't deob earlier and saved the output in another txt file. I removed the IEX part from the script before execution. That worked for me!