MalwareBazaar Database

This page shows some basic information the YARA rule Windows_Trojan_Metasploit_f7f826b4 including corresponding malware samples.

Database Entry

YARA Rule:Windows_Trojan_Metasploit_f7f826b4
Create hunting rule
Author:Elastic Security
Description:Identifies metasploit kernel->user shellcode. Likely used in ETERNALBLUE and BlueKeep exploits.
Firstseen:2023-06-26 04:10:13 UTC
Lastseen:never
Sightings:1

Malware Samples

The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter