General
- Target gf-revshell.ps1
- Size 3KB
- Sample260603-mt4pfsc171
- SHA256 854e9678a98852dc26d0a341fd3bb1a728b8fb1235fd8fd8159fcee7580e69f5
- MD5 88a284053e261d55fcda0a9ac5d1a8ac
- SHA1 b126deac494e059f54d89767aa7e7fe9d5928b9a
- SHA512 73f466eab9506bb82472a12eff4335cc3c2108184e6f9fcdc2e0ab4889f612ef15639732bb31b690d1f93084abdbabe9fa2847e82e6007a6eb27b4e302691d1d
- TLSH T1EE6195043DF95494079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB0ADC
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
gf-revshell.ps1
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
gf-revshell.ps1
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target gf-revshell.ps1
- Size 3KB
- SHA256 854e9678a98852dc26d0a341fd3bb1a728b8fb1235fd8fd8159fcee7580e69f5
- MD5 88a284053e261d55fcda0a9ac5d1a8ac
- SHA1 b126deac494e059f54d89767aa7e7fe9d5928b9a
- SHA512 73f466eab9506bb82472a12eff4335cc3c2108184e6f9fcdc2e0ab4889f612ef15639732bb31b690d1f93084abdbabe9fa2847e82e6007a6eb27b4e302691d1d
- TLSH T1EE6195043DF95494079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB0ADC
- MD5 SHA1 SHA512 TLSH
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.