General
- Target gf-revshell.ps1
- Size 3KB
- Sample260603-mwkpcsds4s
- SHA256 9916bcab26367b7315577cd99bf763e5a67830e04bf0fece075100b7e7a5278e
- MD5 82b97dfd18c81bcdfb488b814f09b601
- SHA1 94780481fc0550ea409021d186c6eb7b7aad762d
- SHA512 431212a5d3c8d95d96c656c5b2a1f3c426703b42be859527753ccedd1ee201ebaebe8368002bcb0e8d4cacb00c1df0269dc818a276ed9dd54f3b3978d5d70040
- TLSH T1E16195043DF95494079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB0ADC
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
gf-revshell.ps1
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
gf-revshell.ps1
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target gf-revshell.ps1
- Size 3KB
- SHA256 9916bcab26367b7315577cd99bf763e5a67830e04bf0fece075100b7e7a5278e
- MD5 82b97dfd18c81bcdfb488b814f09b601
- SHA1 94780481fc0550ea409021d186c6eb7b7aad762d
- SHA512 431212a5d3c8d95d96c656c5b2a1f3c426703b42be859527753ccedd1ee201ebaebe8368002bcb0e8d4cacb00c1df0269dc818a276ed9dd54f3b3978d5d70040
- TLSH T1E16195043DF95494079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB0ADC
- MD5 SHA1 SHA512 TLSH
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.