MalwareBazaar Database

This page shows some basic information the YARA rule HKTL_NET_GUID_privilege_escalation_awesome_scripts_suite including corresponding malware samples.

Database Entry


YARA Rule:HKTL_NET_GUID_privilege_escalation_awesome_scripts_suite
Author:Arnim Rupp (https://github.com/ruppde)
Description:Detects .NET red/black-team tools via typelibguid
Firstseen:2023-08-08 07:15:56 UTC
Lastseen:2025-05-30 07:29:35 UTC
Sightings:8

Malware Samples


The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter