General
- Target gf-revshell.ps1
- Size 782B
- Sample260602-yf4cbaex4m
- SHA256 0ff966dfe522ef186ac13a31d05548581d1a41adf757d46e83173a5d77f42312
- MD5 290f2879483d879c2bc1c0cc085adae9
- SHA1 b3ba123571df74a3be3b54e2bd81221eed5b1a1a
- SHA512 cc6dea558ec74a383b8b4022f2d0b545d42d494c53840d445477c025d1492c5c7ed51f4c6ff4a320e613777f1d65efebc8f810d050ed69bccd92c8d5253723dd
- TLSH T17201BD25698C99B8171134F6CE0AFF94E0B08A93D47FFEA057C9C52AC4A399CB570568
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
gf-revshell.ps1
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
gf-revshell.ps1
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target gf-revshell.ps1
- Size 782B
- SHA256 0ff966dfe522ef186ac13a31d05548581d1a41adf757d46e83173a5d77f42312
- MD5 290f2879483d879c2bc1c0cc085adae9
- SHA1 b3ba123571df74a3be3b54e2bd81221eed5b1a1a
- SHA512 cc6dea558ec74a383b8b4022f2d0b545d42d494c53840d445477c025d1492c5c7ed51f4c6ff4a320e613777f1d65efebc8f810d050ed69bccd92c8d5253723dd
- TLSH T17201BD25698C99B8171134F6CE0AFF94E0B08A93D47FFEA057C9C52AC4A399CB570568
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.