MalwareBazaar Database

This page shows some basic information the YARA rule Windows_Trojan_CobaltStrike_5b4383ec including corresponding malware samples.

Database Entry

YARA Rule:Windows_Trojan_CobaltStrike_5b4383ec
Create hunting rule
Author:Elastic Security
Description:Identifies Portscan module from Cobalt Strike
Firstseen:2024-01-13 05:41:09 UTC
Lastseen:never
Sightings:1

Malware Samples

The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter