BATLoader Lurks Under PowerShell Script to Evade Detection, Launch

The researchers were able to notice the difference in the method, and how the malicious payload was being delivered using BATLoader.

How malicious PowerShell scripts evade detection

eSentire eSentire Threat Intelligence Malware Analysis: BatLoader

HellsBells, Let's Hunt PowerShells!

Cyble — New BATLoader Disseminates RATs and Stealers

Web Filtering Blog

Pentesting Windows environments: remote delivery of PowerShell payloads

Modifying Empire to Evade Windows Defender :: Mike Gualtieri

Modifying Empire to Evade Windows Defender :: Mike Gualtieri

Windows Red Team Defense Evasion Techniques

the powershell script is detectable. · Issue #154 · trustedsec/unicorn · GitHub

Evade Windows Defender PowerShell Empire agent detection, by Nol White Hat

PowerShell Obfuscation Technique Bypasses Most Antiviruses - SOC Prime

TruKno Real-World Threat Intelligence

SafeBreach Uncovers Fully Undetectable PowerShell Backdoor

TruKno Real-World Threat Intelligence