General
- Target gf-revshell.ps1
- Size 3KB
- Sample260603-mshqlac121
- SHA256 c2e0daf7bdca4cba420ee058f85baf5b3883c6629dac211c5a788054de2952f1
- MD5 e8dfad8f9cbff50165c0398a6cd7b618
- SHA1 2a40e9e3cf3d3246d26c436ebb88ad8f5b2a9595
- SHA512 30e4a38c862d7e78207755990ce39f7e5569cc6da5920b52fcc123c26741eb762588a738a53a44492070e0af695b19702d5f1daf24e44756f5a2569d940ec6e9
- TLSH T1FF6184143DF95490079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB0ADC
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
gf-revshell.ps1
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
gf-revshell.ps1
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target gf-revshell.ps1
- Size 3KB
- SHA256 c2e0daf7bdca4cba420ee058f85baf5b3883c6629dac211c5a788054de2952f1
- MD5 e8dfad8f9cbff50165c0398a6cd7b618
- SHA1 2a40e9e3cf3d3246d26c436ebb88ad8f5b2a9595
- SHA512 30e4a38c862d7e78207755990ce39f7e5569cc6da5920b52fcc123c26741eb762588a738a53a44492070e0af695b19702d5f1daf24e44756f5a2569d940ec6e9
- TLSH T1FF6184143DF95490079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB0ADC
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.