General
- Target gf-revshell.ps1
- Size 3KB
- Sample260603-m3wp7sdv7v
- SHA256 aace119f939e9d9f104dcfaadf1ed0b3979fc228eab7591f4b4e192c5fcec0fc
- MD5 1a70c5a67a721e9b360b8b8e3f510433
- SHA1 983dfae51bd07e40f8539f3c6c0bb7be76896ea2
- SHA512 685604cb2666e3b6983f20486c47c84b335de2f3bfdbd2c316a4f177867c2c9fb7eee17726b5bf14b6833a504214a146c670560b3a7c5f96e0dab013ce9c7602
- TLSH T13B6195043DF95490079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB0ADC
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
gf-revshell.ps1
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
gf-revshell.ps1
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target gf-revshell.ps1
- Size 3KB
- SHA256 aace119f939e9d9f104dcfaadf1ed0b3979fc228eab7591f4b4e192c5fcec0fc
- MD5 1a70c5a67a721e9b360b8b8e3f510433
- SHA1 983dfae51bd07e40f8539f3c6c0bb7be76896ea2
- SHA512 685604cb2666e3b6983f20486c47c84b335de2f3bfdbd2c316a4f177867c2c9fb7eee17726b5bf14b6833a504214a146c670560b3a7c5f96e0dab013ce9c7602
- TLSH T13B6195043DF95490079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB0ADC
- MD5 SHA1 SHA512 TLSH
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.