General
- Target gf-revshell.ps1
- Size 3KB
- Sample260606-mwt8sscs2w
- SHA256 4bf942d6d910d42aa25452fd372eb64e809735f1b9991e4ec133807d74928715
- MD5 80eb879da13c5cb488d0ef36b93bb582
- SHA1 357b08f4359cc08e0092bfb9a1a4742a0678a1c3
- SHA512 56a7de161d82bdc68e4963da7447bd7033db6f93d5fa57ca2083ffdf08f7bae028ef8a94031a9b80d73edf5732617c3620439002f3005194faddfab40ee6df92
- TLSH T1066195143EF95490079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB0ADC
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
gf-revshell.ps1
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
gf-revshell.ps1
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target gf-revshell.ps1
- Size 3KB
- SHA256 4bf942d6d910d42aa25452fd372eb64e809735f1b9991e4ec133807d74928715
- MD5 80eb879da13c5cb488d0ef36b93bb582
- SHA1 357b08f4359cc08e0092bfb9a1a4742a0678a1c3
- SHA512 56a7de161d82bdc68e4963da7447bd7033db6f93d5fa57ca2083ffdf08f7bae028ef8a94031a9b80d73edf5732617c3620439002f3005194faddfab40ee6df92
- TLSH T1066195143EF95490079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB0ADC
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.