General
- Target gf-revshell.ps1
- Size 643B
- Sample260602-thmp5aa13k
- SHA256 844064d8a86500faa28b3cad00de221bbbef8cd10f4d777023e8487118c640c8
- MD5 c27c226b39c23abb8051657dae91345b
- SHA1 a4e3a947189a4119672f2d0dc42af90534e70813
- SHA512 71be209f9b28c6c80033b50d60728cac4af02593dbc2ecec104e2dc65e817b3679e0620e958c4720cca350907098ad07b1473cb3247b18fbfa8ff39254e94408
- TLSH T17FF049546DD988B8172138FBCA09EF04E0B05A93C47FEE5057C9C62ED4E315CB574169
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
gf-revshell.ps1
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
gf-revshell.ps1
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target gf-revshell.ps1
- Size 643B
- SHA256 844064d8a86500faa28b3cad00de221bbbef8cd10f4d777023e8487118c640c8
- MD5 c27c226b39c23abb8051657dae91345b
- SHA1 a4e3a947189a4119672f2d0dc42af90534e70813
- SHA512 71be209f9b28c6c80033b50d60728cac4af02593dbc2ecec104e2dc65e817b3679e0620e958c4720cca350907098ad07b1473cb3247b18fbfa8ff39254e94408
- TLSH T17FF049546DD988B8172138FBCA09EF04E0B05A93C47FEE5057C9C62ED4E315CB574169
- MD5 SHA1 SHA512 TLSH
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.