MalwareBazaar Database

This page shows some basic information the YARA rule PowerShell_in_Word_Doc_RID2FBC including corresponding malware samples.

Database Entry

YARA Rule:PowerShell_in_Word_Doc_RID2FBC
Create hunting rule
Author:Florian Roth
Description:Detects a powershell and bypass keyword in a Word document
Firstseen:2022-10-19 05:30:08 UTC
Lastseen:2025-12-15 15:10:25 UTC
Sightings:21

Malware Samples

The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter