General
- Target gf-revshell.ps1
- Size 642B
- Sample260602-1danbses7w
- SHA256 b823b4accdf175774b39d0a3670b9fb3a2b1b5b602a12e5d1e256ee3826d0722
- MD5 d3d04bded8a853462ae4a9022910ea00
- SHA1 57d4a2a9f0ea66a0736de307cf057c5a6baecc56
- SHA512 9ec6b94c1260570e010e5a8eca92be70615a331b1fa207dd5369a08234dde828ef09c1a0b219a6c2719b18da3d4f0004477951e690e137367aaecc254c07c828
- TLSH T157F049546DD988B8132138FBCA09EF44E0B05A93C43FEF5097C9C52ED0E355CB574169
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
gf-revshell.ps1
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
gf-revshell.ps1
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target gf-revshell.ps1
- Size 642B
- SHA256 b823b4accdf175774b39d0a3670b9fb3a2b1b5b602a12e5d1e256ee3826d0722
- MD5 d3d04bded8a853462ae4a9022910ea00
- SHA1 57d4a2a9f0ea66a0736de307cf057c5a6baecc56
- SHA512 9ec6b94c1260570e010e5a8eca92be70615a331b1fa207dd5369a08234dde828ef09c1a0b219a6c2719b18da3d4f0004477951e690e137367aaecc254c07c828
- TLSH T157F049546DD988B8132138FBCA09EF44E0B05A93C43FEF5097C9C52ED0E355CB574169
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.