General
- Target gf-revshell.ps1
- Size 3KB
- Sample260603-mxgdbsds7x
- SHA256 68e379a29f49613206f359a3ee47ee870562610b3059f68185701c73d7a964ee
- MD5 7b8ea4679e2dabd8819f63bba6c63a2d
- SHA1 9e56b8d54ce056361cf6121c7f011ef74fb2f222
- SHA512 e43b1d211498a6bfb432af584de3756f39c1d177c49023bcf1f83fd682ddb60b4afcd381f07d2608036e0246b34baf88bb8a28b981bdfb583613c63d8e2a6756
- TLSH T19A6184043DF95490079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB0ADC
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
gf-revshell.ps1
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
gf-revshell.ps1
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target gf-revshell.ps1
- Size 3KB
- SHA256 68e379a29f49613206f359a3ee47ee870562610b3059f68185701c73d7a964ee
- MD5 7b8ea4679e2dabd8819f63bba6c63a2d
- SHA1 9e56b8d54ce056361cf6121c7f011ef74fb2f222
- SHA512 e43b1d211498a6bfb432af584de3756f39c1d177c49023bcf1f83fd682ddb60b4afcd381f07d2608036e0246b34baf88bb8a28b981bdfb583613c63d8e2a6756
- TLSH T19A6184043DF95490079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB0ADC
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.