MalwareBazaar Database

This page shows some basic information the YARA rule SUSP_PE_Discord_Attachment_Oct21_1 including corresponding malware samples.

Database Entry


YARA Rule:SUSP_PE_Discord_Attachment_Oct21_1
Author:Florian Roth
Description:Detects suspicious executable with reference to a Discord attachment (often used for malware hosting on a legitimate FQDN)
Firstseen:2021-11-05 07:30:04 UTC
Lastseen:2024-04-05 14:29:52 UTC
Sightings:1'198

Malware Samples


The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter