MalwareBazaar Database

This page shows some basic information the YARA rule SUSP_PS1_FromBase64String_Content_Indicator_RID3714 including corresponding malware samples.

Database Entry

YARA Rule:SUSP_PS1_FromBase64String_Content_Indicator_RID3714
Create hunting rule
Author:Florian Roth
Description:Detects suspicious base64 encoded PowerShell expressions
Firstseen:2021-02-28 06:16:05 UTC
Lastseen:2025-12-01 16:59:28 UTC
Sightings:169

Malware Samples

The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter