General
- Target gf-revshell.ps1
- Size 3KB
- Sample260603-mt19bsc17x
- SHA256 845dcedffaaf3f22dde9d0d09bc409a6448a86a9d89488833363cf988291e7e8
- MD5 cb6aa5f2623507e4434a0d87fe659765
- SHA1 b7c4c5aa6448738a96ff0e92536f170e4f41c922
- SHA512 663cad381b49520b4990b5cb65e98179b3a364a26db81c58de258e1537a451745a726385f03ee25ec7b3c0ee79a763faf523c148f7b6b20b1a9cafb074599528
- TLSH T1836184043DF95490079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB0ADC
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
gf-revshell.ps1
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
gf-revshell.ps1
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target gf-revshell.ps1
- Size 3KB
- SHA256 845dcedffaaf3f22dde9d0d09bc409a6448a86a9d89488833363cf988291e7e8
- MD5 cb6aa5f2623507e4434a0d87fe659765
- SHA1 b7c4c5aa6448738a96ff0e92536f170e4f41c922
- SHA512 663cad381b49520b4990b5cb65e98179b3a364a26db81c58de258e1537a451745a726385f03ee25ec7b3c0ee79a763faf523c148f7b6b20b1a9cafb074599528
- TLSH T1836184043DF95490079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB0ADC
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.