MalwareBazaar Database

This page shows some basic information the YARA rule Gen_Net_LocalGroup_Administrators_Add_Command_RID38C1 including corresponding malware samples.

Database Entry

YARA Rule:Gen_Net_LocalGroup_Administrators_Add_Command_RID38C1
Create hunting rule
Author:Florian Roth
Description:Detects an executable that contains a command to add a user account to the local administrators group
Firstseen:2022-02-23 10:11:57 UTC
Lastseen:2025-11-16 07:10:13 UTC
Sightings:23

Malware Samples

The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter