General
- Target gf-revshell.ps1
- Size 781B
- Sample260602-vghkfsa16s
- SHA256 8f4fca11331571f730fda2c0b04afad5f41a33fcd4fa62e40d3ca181ea2dea90
- MD5 f2a7820dab2f781701c37f1a26fe8591
- SHA1 27ef7554a6c7c11253b9ab1dc9c5f1220e1d47f9
- SHA512 c4418536dec76bb7586a2b0d12f7b00c14bae70a23f814ec06b577fbce73b7ea681b5e2fd1ab850673de16d9202ec198f22896edae4069fb6ea908e01ca7bb9c
- TLSH T1D601BD25698C89B8172134F6CE05FF54E0B0DAD3D43FFEA467C9C52AD4A399CB570168
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
gf-revshell.ps1
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
gf-revshell.ps1
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target gf-revshell.ps1
- Size 781B
- SHA256 8f4fca11331571f730fda2c0b04afad5f41a33fcd4fa62e40d3ca181ea2dea90
- MD5 f2a7820dab2f781701c37f1a26fe8591
- SHA1 27ef7554a6c7c11253b9ab1dc9c5f1220e1d47f9
- SHA512 c4418536dec76bb7586a2b0d12f7b00c14bae70a23f814ec06b577fbce73b7ea681b5e2fd1ab850673de16d9202ec198f22896edae4069fb6ea908e01ca7bb9c
- TLSH T1D601BD25698C89B8172134F6CE05FF54E0B0DAD3D43FFEA467C9C52AD4A399CB570168
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.