General
- Target gf-revshell.ps1
- Size 782B
- Sample260602-ydydaaew8p
- SHA256 570815d670e9eb060a8254abff05787756eedccd66b6f49811873ab30d3fc9c3
- MD5 954355fdeeac6776bfd840c48fc531b4
- SHA1 9a22ff742ca173d76e908c64761987960cd4e513
- SHA512 0354553f8a32c8f08a6396399d3d0efe52129e9c4d0d6d183446de926004299e5ef6c21c7ea8e8d462fc8ba6f0c229ca04d24e7b494c11a2671b2c397448f5e2
- TLSH T1AF018925698899B8171134EACE09FF54E0B08A83D43FBEA05799C56AC4E399CB560568
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
gf-revshell.ps1
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
gf-revshell.ps1
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target gf-revshell.ps1
- Size 782B
- SHA256 570815d670e9eb060a8254abff05787756eedccd66b6f49811873ab30d3fc9c3
- MD5 954355fdeeac6776bfd840c48fc531b4
- SHA1 9a22ff742ca173d76e908c64761987960cd4e513
- SHA512 0354553f8a32c8f08a6396399d3d0efe52129e9c4d0d6d183446de926004299e5ef6c21c7ea8e8d462fc8ba6f0c229ca04d24e7b494c11a2671b2c397448f5e2
- TLSH T1AF018925698899B8171134EACE09FF54E0B08A83D43FBEA05799C56AC4E399CB560568
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.