MalwareBazaar Database
This page shows some basic information the YARA rule MAL_NET_UAC_Bypass_May25 including corresponding malware samples.
Database Entry
| YARA Rule: | MAL_NET_UAC_Bypass_May25 |
|---|---|
| Author: | Jonathan Peters (cod3nym) |
| Description: | Detects .NET based tool abusing legitimate Windows utility cmstp.exe to bypass UAC (User-Admin-Controls) |
| Firstseen: | 2025-06-23 13:55:56 UTC |
| Lastseen: | never |
| Sightings: | 1 |
Malware Samples
The table below shows all malware samples that matching this particular YARA rule (max 1000).
| Firstseen (UTC) | SHA256 hash | Tags | Signature | Reporter |
|---|