MalwareBazaar Database

This page shows some basic information the YARA rule Windows_Trojan_Behinder_b9a49f4b including corresponding malware samples.

Database Entry


YARA Rule:Windows_Trojan_Behinder_b9a49f4b
Author:Elastic Security
Description:Webshell found in REF2924, either Behinder or Godzilla based shell in C#
Firstseen:2026-07-27 11:39:10 UTC
Lastseen:2026-09-29 05:25:24 UTC
Sightings:4

Malware Samples


The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter