General
- Target gf-revshell.ps1
- Size 642B
- Sample260603-hfv3yaav2t
- SHA256 79d60c035ecab34f04ec107793b1b22bea1cda23a264c171c4c873bec74238d1
- MD5 0e1958825ab545022b7d252d881705ad
- SHA1 6a774eca1e5e3d7f986e9e801f95f2d05c5da503
- SHA512 d9e69a7a6105dbadf4e1004a318b8b5df578f578b399bef007ec48a582697a4aedee742b119804895c29a3e88ef1f186c8181522e5e99ad78b4701a04760a297
- TLSH T16DF049546DD988B8132134FBCA09EF44E0B05A93C43FEE9057C9C52ED4E355CB574169
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
gf-revshell.ps1
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
gf-revshell.ps1
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target gf-revshell.ps1
- Size 642B
- SHA256 79d60c035ecab34f04ec107793b1b22bea1cda23a264c171c4c873bec74238d1
- MD5 0e1958825ab545022b7d252d881705ad
- SHA1 6a774eca1e5e3d7f986e9e801f95f2d05c5da503
- SHA512 d9e69a7a6105dbadf4e1004a318b8b5df578f578b399bef007ec48a582697a4aedee742b119804895c29a3e88ef1f186c8181522e5e99ad78b4701a04760a297
- TLSH T16DF049546DD988B8132134FBCA09EF44E0B05A93C43FEE9057C9C52ED4E355CB574169
- MD5 SHA1 SHA512 TLSH
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.