CastleStealer ping-delay self-deletion via cmd.exe

Adarsh Pandey@Pandeyadarsh

•updated today•0•0•1

Detects execution of cmd.exe running a ping delay command chained with a file deletion command (del or erase), often used by malware or threat actors to delay execution before self-deletion or cleanup.