Skip to content
THE HUNTER’S LEDGER
webshell
Godzilla
Named by 1 report, 1 detection rule, 0 IOC feeds.

← All families

Also written as: Godzilla-style .NET loader webshell. These are the spellings the rules, feeds and profiles use; the page collects all of them.

Reports

Report Jun 2026
Flask C2 & MSSQL CLR Backdoor on a Windows Post-Exploitation Staging Host
Detection rulesIOC feedSTIX bundle

Detection rules

YARA rules whose family metadata names this family, by detection page.

Detection rules Jun 2026 · 1 rule · family = Godzilla-style .NET loader webshell
Flask C2 & MSSQL CLR Backdoor on a Windows Post-Exploitation Staging Host
Webshell_NPCInfoList1_AES_Loader

A family name here is the label the linked rule, feed or profile carries, normalised to one spelling by _data/families.yml. Where a report declines to name a family, this page does not either.