MalwareBazaar Database

This page shows some basic information the YARA rule SUSP_RAR_with_PDF_Script_Obfuscation_RID34A4 including corresponding malware samples.

Database Entry

YARA Rule:SUSP_RAR_with_PDF_Script_Obfuscation_RID34A4
Create hunting rule
Author:Florian Roth
Description:Detects RAR file with suspicious .pdf extension prefix to trick users
Firstseen:2021-09-10 05:07:12 UTC
Lastseen:2026-05-21 14:40:45 UTC
Sightings:511

Malware Samples

The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter