MalwareBazaar Database
This page shows some basic information the YARA rule SUSP_PowerShell_Base64_Decode including corresponding malware samples.
Database Entry
| YARA Rule: | SUSP_PowerShell_Base64_Decode |
|---|---|
| Author: | SECUINFRA Falcon Team |
| Description: | Detects PowerShell code to decode Base64 data. This can yield many FP |
| Firstseen: | 2022-03-08 05:44:52 UTC |
| Lastseen: | 2025-10-21 05:49:50 UTC |
| Sightings: | 789 |
Malware Samples
The table below shows all malware samples that matching this particular YARA rule (max 1000).
| Firstseen (UTC) | SHA256 hash | Tags | Signature | Reporter |
|---|