#ParsedReport #CompletenessMedium
22-09-2026

TASK#STOMP: PowerShell Backdoor for Document Theft and Remote Access

https://www.securonix.com/blog/task-stomp-powershell-backdoor-document-theft-remote-access/

Report completeness: Medium

Threats:
Task_stomp_tool
Timestomp_technique

TTPs:
Tactics: 9
Technics: 20

IOCs:
File: 21
Domain: 2
Command: 8
Url: 4
Hash: 10

Soft:
Chrome, Task Scheduler, Windows Defender, Windows shell, NET Framework, Google Chrome, Twitter

Algorithms:
md5, base64, gzip

Functions:
Get-WmiObject, Add-Type, Get-Random, ReadAllText

Languages:
powershell, visual_basic, vbscript

Platforms:
x64