General
- Target gf-revshell.ps1
- Size 781B
- Sample260602-vb469scs3p
- SHA256 8bbf9e2781e7de0b0f7198049ceeb7baacbd8e2b43aeab2a59152121ff3e11b1
- MD5 fd56c83b5bc90ff7f69613d315370d75
- SHA1 323795afe22a341e93349a8459eafd1b1bdfbb31
- SHA512 2734de5e0bb5ddd96fa4e9ec676668506b5507be80950c3d05e649484601a9d07cc1be0a571ff5dea0373c8422c01093662a9426dfd6f8139e40122cda1c5299
- TLSH T14701BD656D8C99B8171134F6CE09FF54E0B0CA83C43FFEA457D9C62AC4A399CB570168
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
gf-revshell.ps1
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
gf-revshell.ps1
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target gf-revshell.ps1
- Size 781B
- SHA256 8bbf9e2781e7de0b0f7198049ceeb7baacbd8e2b43aeab2a59152121ff3e11b1
- MD5 fd56c83b5bc90ff7f69613d315370d75
- SHA1 323795afe22a341e93349a8459eafd1b1bdfbb31
- SHA512 2734de5e0bb5ddd96fa4e9ec676668506b5507be80950c3d05e649484601a9d07cc1be0a571ff5dea0373c8422c01093662a9426dfd6f8139e40122cda1c5299
- TLSH T14701BD656D8C99B8171134F6CE09FF54E0B0CA83C43FFEA457D9C62AC4A399CB570168
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.