StealC Self-Deletion via cmd.exe Timeout Delay and Forced File Delete

Ibrahim Saud@tektrix

•updated Jun 24, 2026•0•0•3

Detects a common self-deletion pattern used by the StealC infostealer. The malware attempts to clean up its own traces by launching cmd.exe with a command sequence involving a timeout delay, followed by the forced deletion of files within temporary or application data directories.