MalwareBazaar Database

This page shows some basic information the YARA rule Windows_Trojan_Metasploit_c9773203 including corresponding malware samples.

Database Entry


YARA Rule:Windows_Trojan_Metasploit_c9773203
Author:Elastic Security
Description:Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families.
Firstseen:2022-10-29 20:28:46 UTC
Lastseen:2025-11-10 20:30:12 UTC
Sightings:380

Malware Samples


The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter