General
- Target gf-revshell.ps1
- Size 3KB
- Sample260603-pc573aet2t
- SHA256 7a94291ddbb7f87112a8f8eeff2fc0a1db1db178d52e483f2f5a5aeef749ed80
- MD5 708aa76a3ee577fea58b117212b960b9
- SHA1 2f53f32f3bb44b7fbf4fc389fcb4623b5d9f5eed
- SHA512 16e3f5989f637063345802360cae5828a79b86e0b00edbd55bd4560c93b684af6658c24965f5568b1c642d06fe48cbef8ea730aeeaeb2ae7c27167bae201ffda
- TLSH T1BF6195043DF95490079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB0ADC
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
gf-revshell.ps1
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
gf-revshell.ps1
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target gf-revshell.ps1
- Size 3KB
- SHA256 7a94291ddbb7f87112a8f8eeff2fc0a1db1db178d52e483f2f5a5aeef749ed80
- MD5 708aa76a3ee577fea58b117212b960b9
- SHA1 2f53f32f3bb44b7fbf4fc389fcb4623b5d9f5eed
- SHA512 16e3f5989f637063345802360cae5828a79b86e0b00edbd55bd4560c93b684af6658c24965f5568b1c642d06fe48cbef8ea730aeeaeb2ae7c27167bae201ffda
- TLSH T1BF6195043DF95490079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB0ADC
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.