YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 1232d274daaa4b378f9e6183bba72e51ce0a75bf88a10d159d758f3fc4050c75.

Scan Results

SHA256 hash:	1232d274daaa4b378f9e6183bba72e51ce0a75bf88a10d159d758f3fc4050c75
File size:	61'973 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	607d8214de9f0c3c3710d122ed1b26dc
SHA1 hash:	d5e67f85ee2c16ad3c3ed43872a359117bd83874
SHA3-384 hash:	8576a12b994e7788a411060ff528bcdb1923e9b85f61c3f934da67fdfebffa1348bdd855df145368091a3606cb7caacc
First seen:	2025-12-26 18:10:03 UTC
Last seen:	2025-12-26 18:10:05 UTC
Sightings:	3
imphash :	1f75ee5de8ac0c77c6e43508555114fe Create hunting rule
ssdeep :	768:xzUXTQjaEyVm195IcIjNQSkwy3BEP+9XOQ69zbjlAAX5e9z6:eXTdEQcEWxTUwizbR9Xwz6
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	00ccc4d0c4fc7c00 Create hunting rule

Tasks

There are 3 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:	1ad77d78-e286-11f0-9df4-42010aa4000b
File name:	backup.exe
Task parameters:	ClamAV scan:	True
	Unpack:	False
	Share file:	True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:	Legacy.Trojan.Agent-1388589 Create hunting rule

Signature:	Win.Dropper.Razy-7605528-0 Create hunting rule

Signature:	Win.Malware.Genpack-6989317-0 Create hunting rule

Signature:	Win.Malware.Vilsel-6804257-0 Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:	PE_Digital_Certificate Create hunting rule
Author:	albertzsigovits
TLP:	TLP:WHITE
Repository:

Rule name:	upx_3 Create hunting rule
Author:	Kevin Falcoz
Description:	UPX 3.X
TLP:	TLP:WHITE

Rule name:	UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser Create hunting rule
Author:	malware-lu
TLP:	TLP:WHITE
Repository:

Rule name:	UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser Create hunting rule
Author:	malware-lu
TLP:	TLP:WHITE
Repository:

Rule name:	UPXv20MarkusLaszloReiser Create hunting rule
Author:	malware-lu
TLP:	TLP:WHITE
Repository:

Unpacker

The following YARA rules matched on the unpacked file.

Disabled by submitter

Unpacked Files

The following files could be unpacked from this sample.

Disabled by submitter

Task Information

Task ID:	1a3dd23c-e286-11f0-9df4-42010aa4000b
File name:	backup.exe
Task parameters:	ClamAV scan:	True
	Unpack:	False
	Share file:	True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:	Legacy.Trojan.Agent-1388589 Create hunting rule

Signature:	Win.Dropper.Razy-7605528-0 Create hunting rule

Signature:	Win.Malware.Genpack-6989317-0 Create hunting rule

Signature:	Win.Malware.Vilsel-6804257-0 Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:	PE_Digital_Certificate Create hunting rule
Author:	albertzsigovits
TLP:	TLP:WHITE
Repository:

Rule name:	upx_3 Create hunting rule
Author:	Kevin Falcoz
Description:	UPX 3.X
TLP:	TLP:WHITE

Rule name:	UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser Create hunting rule
Author:	malware-lu
TLP:	TLP:WHITE
Repository:

Rule name:	UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser Create hunting rule
Author:	malware-lu
TLP:	TLP:WHITE
Repository:

Rule name:	UPXv20MarkusLaszloReiser Create hunting rule
Author:	malware-lu
TLP:	TLP:WHITE
Repository:

Unpacker

The following YARA rules matched on the unpacked file.

Disabled by submitter

Unpacked Files

The following files could be unpacked from this sample.

Disabled by submitter

Task Information

Task ID:	19d5a1eb-e286-11f0-9df4-42010aa4000b
File name:	backup.exe
Task parameters:	ClamAV scan:	True
	Unpack:	False
	Share file:	True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:	Legacy.Trojan.Agent-1388589 Create hunting rule

Signature:	Win.Dropper.Razy-7605528-0 Create hunting rule

Signature:	Win.Malware.Genpack-6989317-0 Create hunting rule

Signature:	Win.Malware.Vilsel-6804257-0 Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:	PE_Digital_Certificate Create hunting rule
Author:	albertzsigovits
TLP:	TLP:WHITE
Repository:

Rule name:	upx_3 Create hunting rule
Author:	Kevin Falcoz
Description:	UPX 3.X
TLP:	TLP:WHITE

Rule name:	UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser Create hunting rule
Author:	malware-lu
TLP:	TLP:WHITE
Repository:

Rule name:	UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser Create hunting rule
Author:	malware-lu
TLP:	TLP:WHITE
Repository:

Rule name:	UPXv20MarkusLaszloReiser Create hunting rule
Author:	malware-lu
TLP:	TLP:WHITE
Repository:

Unpacker

The following YARA rules matched on the unpacked file.

Disabled by submitter

Unpacked Files

The following files could be unpacked from this sample.

Disabled by submitter

YARAify Scan Results

Scan Results Rescan

Tasks

2025-12-26 18:10:05 UTC Static: 5 Unpacker: 0 ClamAV: 4

Task Information

ClamAV Results

YARA Results

Static Analysis

Unpacker

Unpacked Files

2025-12-26 18:10:04 UTC Static: 5 Unpacker: 0 ClamAV: 4

Task Information

ClamAV Results

YARA Results

Static Analysis

Unpacker

Unpacked Files

2025-12-26 18:10:03 UTC Static: 5 Unpacker: 0 ClamAV: 4

Task Information

ClamAV Results

YARA Results

Static Analysis

Unpacker

Unpacked Files

Scan Results