MalwareBazaar Database

This page shows some basic information the YARA rule INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC including corresponding malware samples.

Database Entry

YARA Rule:INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC
Create hunting rule
Author:ditekSHen
Description:Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution
Firstseen:2021-10-12 13:35:37 UTC
Lastseen:2026-02-08 10:37:22 UTC
Sightings:45

Malware Samples

The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter