General
- Target gf-revshell.ps1
- Size 3KB
- Sample260606-py2rrsft2j
- SHA256 6645f9ad97431238126b4f63bfa70c263b98a2f14013f41caa5b8ce1e5da7257
- MD5 ce56bdc3ba724b6798390da2ce0dfd03
- SHA1 e83596db4058f779f5b409941375975e7ceb1219
- SHA512 3c1c82dd33b6a78f034708b54fbe9c833b4aac0f460cbe5b5723ca1cd02dabd2878322192eff42bd5481a52bf4d45146a32b4d45a48b34e50f6ed2466f598588
- TLSH T14B6195043EF95490079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB0ADC
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
gf-revshell.ps1
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
gf-revshell.ps1
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target gf-revshell.ps1
- Size 3KB
- SHA256 6645f9ad97431238126b4f63bfa70c263b98a2f14013f41caa5b8ce1e5da7257
- MD5 ce56bdc3ba724b6798390da2ce0dfd03
- SHA1 e83596db4058f779f5b409941375975e7ceb1219
- SHA512 3c1c82dd33b6a78f034708b54fbe9c833b4aac0f460cbe5b5723ca1cd02dabd2878322192eff42bd5481a52bf4d45146a32b4d45a48b34e50f6ed2466f598588
- TLSH T14B6195043EF95490079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB0ADC
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.