MalwareBazaar Database
This page shows some basic information the YARA rule Costura_Protobuf including corresponding malware samples.
Database Entry
| YARA Rule: | Costura_Protobuf |
|---|---|
| Author: | @bartblaze |
| Description: | Identifies Costura and Protobuf in .NET assemblies, respectively for storing resources and (de)serialization. Seen together might indicate a suspect binary. |
| Firstseen: | 2024-07-18 20:52:01 UTC |
| Lastseen: | 2025-10-08 15:12:21 UTC |
| Sightings: | 107 |
Malware Samples
The table below shows all malware samples that matching this particular YARA rule (max 1000).
| Firstseen (UTC) | SHA256 hash | Tags | Signature | Reporter |
|---|