Casting Light on BATLOADER: An Insight into its Role in Malware Delivery

This report details a batloader multi-stage infection chain used to deliver AgentTesla and other malware: an obfuscated .bat copies PowerShell, extracts a Base64 string, GZIP-decompresses and reverses it to reveal a .NET payload which is injected into a process; the document includes technical analysis, file/hex screenshots, example deobfuscation steps, IOCs (hashes), and vendor detections.