MalwareBazaar Database

This page shows some basic information the YARA rule Runtime_Broker_Variant_1 including corresponding malware samples.

Database Entry


YARA Rule:Runtime_Broker_Variant_1
Author:Sn0wFr0$t
Description:Detecting malicious Runtime Broker
Firstseen:2025-06-03 22:18:19 UTC
Lastseen:2025-11-15 09:16:09 UTC
Sightings:155

Malware Samples


The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter