Sdelete.exe ~REPACK~ Free Download
0 views
Skip to first unread message
Sharmaine Kachmar
Jan 21, 2024, 11:02:24 AM1/21/24
to esemhilrea
This analytic will detect the execution of sdelete.exe attempting to delete potentially important files that may related to adversary or insider threats to destroy evidence or information sabotage. Sdelete is a SysInternals utility meant to securely delete files on disk. This tool is commonly used to clear tracks and artifact on the targeted host.
echo copy tools
copy x:\windows\system32\wget64.exe C:\deploy
copy x:\windows\system32\wget64.exe C:\Windows\wget.exe
copy x:\windows\system32\sdelete.exe C:\Windows
IF not exist C:\Windows\Setup\Scripts (md C:\Windows\Setup\Scripts)
echo call C:\deploy\foreman-finish.bat ^> c:\foreman.log 2^>^&1 > C:\Windows\Setup\Scripts\SetupComplete.cmd
Reply all
Reply to author
Forward
0 new messages