Silver Fox Uac Bypass Via ICMLuaUtil
Detects a User Account Control (UAC) bypass attempt using the ICMLuaUtil elevated COM interface. This technique has been observed in use by the Silver Fox APT group to escalate privileges.
YARA-L

Detects a User Account Control (UAC) bypass attempt using the ICMLuaUtil elevated COM interface. This technique has been observed in use by the Silver Fox APT group to escalate privileges.

Already have an account?