MalwareBazaar Database

This page shows some basic information the YARA rule SUSP_PS1_FromBase64String_Content_Indicator including corresponding malware samples.

Database Entry

YARA Rule:SUSP_PS1_FromBase64String_Content_Indicator
Create hunting rule
Author:Florian Roth
Description:Detects suspicious base64 encoded PowerShell expressions
Firstseen:2020-11-07 22:14:22 UTC
Lastseen:2022-07-01 08:47:21 UTC
Sightings:18

Malware Samples

The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter