General
- Target gf-revshell.ps1
- Size 3KB
- Sample260603-leprbac19j
- SHA256 c5dd6482a9811f0d1a6b95435e22b20143b79b3d41e7158cd69aa6facde5ff50
- MD5 6198c4cb0568541528cde7bd2e0d7da0
- SHA1 de7cac93be1a4abf2d005061324b8b33d3cc153e
- SHA512 decefb4d74abe9f5983c0e70ceba106468c5b22d9f0cbf9347338e140142b65dbebfa11b55282d999f52ca261ae507c07665006e7e5d0dc8ee3a2dcc5774f79c
- TLSH T15A6195143EF95490079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB0ADC
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
gf-revshell.ps1
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
gf-revshell.ps1
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target gf-revshell.ps1
- Size 3KB
- SHA256 c5dd6482a9811f0d1a6b95435e22b20143b79b3d41e7158cd69aa6facde5ff50
- MD5 6198c4cb0568541528cde7bd2e0d7da0
- SHA1 de7cac93be1a4abf2d005061324b8b33d3cc153e
- SHA512 decefb4d74abe9f5983c0e70ceba106468c5b22d9f0cbf9347338e140142b65dbebfa11b55282d999f52ca261ae507c07665006e7e5d0dc8ee3a2dcc5774f79c
- TLSH T15A6195143EF95490079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB0ADC
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.