MalwareBazaar Database
This page shows some basic information the YARA rule HackTool_MSIL_Rubeus_1 including corresponding malware samples.
Database Entry
| YARA Rule: | HackTool_MSIL_Rubeus_1 |
|---|---|
| Author: | FireEye |
| Description: | The TypeLibGUID present in a .NET binary maps directly to the ProjectGuid found in the '.csproj' file of a .NET project. This rule looks for .NET PE files that contain the ProjectGuid found in the public Rubeus project. |
| Firstseen: | 2023-07-05 11:33:45 UTC |
| Lastseen: | 2026-02-22 18:14:19 UTC |
| Sightings: | 8 |
Malware Samples
The table below shows all malware samples that matching this particular YARA rule (max 1000).
| Firstseen (UTC) | SHA256 hash | Tags | Signature | Reporter |
|---|