General
- Target gf-revshell.ps1
- Size 3KB
- Sample260606-tgxhyaat4p
- SHA256 5dea8fd8f9f1647fb3e02ce1ffe7ca5d8474203b4caee986ede863c374031f82
- MD5 0d2297ed473216e0045904db8a19f820
- SHA1 215230dd3b497dfdbbed146cf955bf696560e03b
- SHA512 cdc27f5c4ada787444e7e4b28693a1c8bbe601814230d9d081b6ce18c2d12d14d2c7e78373059a5c26c1b2d470bdaa383db9226bc30f085a2e37148422784d58
- TLSH T1B76184043DF95491079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB1ADC
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
gf-revshell.ps1
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
gf-revshell.ps1
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target gf-revshell.ps1
- Size 3KB
- SHA256 5dea8fd8f9f1647fb3e02ce1ffe7ca5d8474203b4caee986ede863c374031f82
- MD5 0d2297ed473216e0045904db8a19f820
- SHA1 215230dd3b497dfdbbed146cf955bf696560e03b
- SHA512 cdc27f5c4ada787444e7e4b28693a1c8bbe601814230d9d081b6ce18c2d12d14d2c7e78373059a5c26c1b2d470bdaa383db9226bc30f085a2e37148422784d58
- TLSH T1B76184043DF95491079320B549CFBD00A5B52263A92D8F5373DDEB94EFA1278CAB1ADC
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.