Update Costura_Protobuf.yar

Add any.run analysis
bartblaze · Mar 21, 2024 · 45413dc · 45413dc
1 parent 345c6c3
commit 45413dc
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/rules/generic/Costura_Protobuf.yar b/rules/generic/Costura_Protobuf.yar
@@ -6,7 +6,7 @@ rule Costura_Protobuf
         fingerprint = "da84b0a5628231b790fa802d404dcebd30c39805360e619ea78c6d56cf5d3c52"
         version = "1.0"
         date = "2024-03-20"
-        modified = "2024-03-20"
+        modified = "2024-03-21"
         status = "RELEASED"
         sharing = "TLP:WHITE"
         source = "BARTBLAZE"
@@ -15,6 +15,7 @@ rule Costura_Protobuf
         category = "INFO"
         reference_a = "https://github.com/Fody/Costura"
         reference_b = "https://github.com/protobuf-net/protobuf-net"
+        reference_c = "https://any.run/cybersecurity-blog/pure-malware-family-analysis/"
 
 strings:
     $comp = "costura.protobuf-net.dll.compressed" ascii wide fullword