MalwareBazaar Database

This page shows some basic information the YARA rule OBFUS_PowerShell_Replace_Tilde including corresponding malware samples.

Database Entry


YARA Rule:OBFUS_PowerShell_Replace_Tilde
Author:SECUINFRA Falcon Team
Description:Detects usage of Replace to replace tilde. Often observed in obfuscation
Firstseen:2022-05-26 18:49:04 UTC
Lastseen:2022-05-26 18:53:29 UTC
Sightings:2

Malware Samples


The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter