MalwareBazaar Database

This page shows some basic information the YARA rule SUSP_VBS_Wscript_Shell including corresponding malware samples.

Database Entry

YARA Rule:SUSP_VBS_Wscript_Shell
Create hunting rule
Author:SECUINFRA Falcon Team
Description:Detects the definition of 'Wscript.Shell' which is often used by Malware, FPs are possible and commmon
Firstseen:2022-03-14 10:39:58 UTC
Lastseen:2025-11-30 19:25:03 UTC
Sightings:597

Malware Samples

The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter