General
- Target gf-revshell.ps1
- Size 3KB
- Sample260603-mwkpcsds31
- SHA256 7f685a8f55244d641abf463a7039d10f364a0374c0768cc69d3e1d70df3d2851
- MD5 7b539b311ff9947c93a1f5e6d435165f
- SHA1 45749bfa7589c525672df9c74e52b374094217f6
- SHA512 cf72da5e93f7528f04cc5505b2a37e8c8c47f16f18828a17c478670670a8b737b1c0a227d90b43d314fecfd01b941bc37d81452f7958f1380b099c22a278d52a
- TLSH T1ED6195043DF95490079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB0ADC
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
gf-revshell.ps1
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
gf-revshell.ps1
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target gf-revshell.ps1
- Size 3KB
- SHA256 7f685a8f55244d641abf463a7039d10f364a0374c0768cc69d3e1d70df3d2851
- MD5 7b539b311ff9947c93a1f5e6d435165f
- SHA1 45749bfa7589c525672df9c74e52b374094217f6
- SHA512 cf72da5e93f7528f04cc5505b2a37e8c8c47f16f18828a17c478670670a8b737b1c0a227d90b43d314fecfd01b941bc37d81452f7958f1380b099c22a278d52a
- TLSH T1ED6195043DF95490079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB0ADC
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.