MalwareBazaar Database

This page shows some basic information the YARA rule HTA_WScriptShell_OneNote including corresponding malware samples.

Database Entry


YARA Rule:HTA_WScriptShell_OneNote
Author:marcin@ulikowski.pl
Description:Detects suspicious OneNote documents with embedded HTA + WScript.Shell
Firstseen:2023-03-19 19:10:46 UTC
Lastseen:never
Sightings:1

Malware Samples


The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter