YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 1d6730b4dc9db19b3e818003b59a38b9e063822ecaeeaa56a5d7ea63ff4090e8.

Scan Results

SHA256 hash:	1d6730b4dc9db19b3e818003b59a38b9e063822ecaeeaa56a5d7ea63ff4090e8
File size:	61'973 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	1e2511096b116a71fd2b189ceeb4de54
SHA1 hash:	12d5fca34ee2679433bdb1ea0ca75f861cbaeb84
SHA3-384 hash:	d57e0276492aef17a684a662a37ac9c6b531d234dd877114e3b451eb6e6f1a0332dd757b3720da5af6a61efac1cefdd6
First seen:	2025-12-26 18:10:02 UTC
Last seen:	2025-12-26 18:10:06 UTC
Sightings:	3
imphash :	1f75ee5de8ac0c77c6e43508555114fe Create hunting rule
ssdeep :	768:xzUXTQjaEyVm195IcIjNQSkwy3BEP+9XOQ69zbjlAAX5e9z0:eXTdEQcEWxTUwizbR9Xwz0
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	00ccc4d0c4fc7c00 Create hunting rule

Tasks

There are 3 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:	1bb817d9-e286-11f0-9df4-42010aa4000b
File name:	backup.exe
Task parameters:	ClamAV scan:	True
	Unpack:	False
	Share file:	True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:	Legacy.Trojan.Agent-1388589 Create hunting rule

Signature:	Win.Dropper.Razy-7605528-0 Create hunting rule

Signature:	Win.Malware.Genpack-6989317-0 Create hunting rule

Signature:	Win.Malware.Vilsel-6804257-0 Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:	PE_Digital_Certificate Create hunting rule
Author:	albertzsigovits
TLP:	TLP:WHITE
Repository:

Rule name:	upx_3 Create hunting rule
Author:	Kevin Falcoz
Description:	UPX 3.X
TLP:	TLP:WHITE

Rule name:	UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser Create hunting rule
Author:	malware-lu
TLP:	TLP:WHITE
Repository:

Rule name:	UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser Create hunting rule
Author:	malware-lu
TLP:	TLP:WHITE
Repository:

Rule name:	UPXv20MarkusLaszloReiser Create hunting rule
Author:	malware-lu
TLP:	TLP:WHITE
Repository:

Unpacker

The following YARA rules matched on the unpacked file.

Disabled by submitter

Unpacked Files

The following files could be unpacked from this sample.

Disabled by submitter

Task Information

Task ID:	1a4f5d95-e286-11f0-9df4-42010aa4000b
File name:	backup.exe
Task parameters:	ClamAV scan:	True
	Unpack:	False
	Share file:	True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:	Legacy.Trojan.Agent-1388589 Create hunting rule

Signature:	Win.Dropper.Razy-7605528-0 Create hunting rule

Signature:	Win.Malware.Genpack-6989317-0 Create hunting rule

Signature:	Win.Malware.Vilsel-6804257-0 Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:	PE_Digital_Certificate Create hunting rule
Author:	albertzsigovits
TLP:	TLP:WHITE
Repository:

Rule name:	upx_3 Create hunting rule
Author:	Kevin Falcoz
Description:	UPX 3.X
TLP:	TLP:WHITE

Rule name:	UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser Create hunting rule
Author:	malware-lu
TLP:	TLP:WHITE
Repository:

Rule name:	UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser Create hunting rule
Author:	malware-lu
TLP:	TLP:WHITE
Repository:

Rule name:	UPXv20MarkusLaszloReiser Create hunting rule
Author:	malware-lu
TLP:	TLP:WHITE
Repository:

Unpacker

The following YARA rules matched on the unpacked file.

Disabled by submitter

Unpacked Files

The following files could be unpacked from this sample.

Disabled by submitter

Task Information

Task ID:	19130542-e286-11f0-9df4-42010aa4000b
File name:	backup.exe
Task parameters:	ClamAV scan:	True
	Unpack:	False
	Share file:	True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:	Legacy.Trojan.Agent-1388589 Create hunting rule

Signature:	Win.Dropper.Razy-7605528-0 Create hunting rule

Signature:	Win.Malware.Genpack-6989317-0 Create hunting rule

Signature:	Win.Malware.Vilsel-6804257-0 Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:	PE_Digital_Certificate Create hunting rule
Author:	albertzsigovits
TLP:	TLP:WHITE
Repository:

Rule name:	upx_3 Create hunting rule
Author:	Kevin Falcoz
Description:	UPX 3.X
TLP:	TLP:WHITE

Rule name:	UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser Create hunting rule
Author:	malware-lu
TLP:	TLP:WHITE
Repository:

Rule name:	UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser Create hunting rule
Author:	malware-lu
TLP:	TLP:WHITE
Repository:

Rule name:	UPXv20MarkusLaszloReiser Create hunting rule
Author:	malware-lu
TLP:	TLP:WHITE
Repository:

Unpacker

The following YARA rules matched on the unpacked file.

Disabled by submitter

Unpacked Files

The following files could be unpacked from this sample.

Disabled by submitter

YARAify Scan Results

Scan Results Rescan

Tasks

2025-12-26 18:10:06 UTC Static: 5 Unpacker: 0 ClamAV: 4

Task Information

ClamAV Results

YARA Results

Static Analysis

Unpacker

Unpacked Files

2025-12-26 18:10:04 UTC Static: 5 Unpacker: 0 ClamAV: 4

Task Information

ClamAV Results

YARA Results

Static Analysis

Unpacker

Unpacked Files

2025-12-26 18:10:02 UTC Static: 5 Unpacker: 0 ClamAV: 4

Task Information

ClamAV Results

YARA Results

Static Analysis

Unpacker

Unpacked Files

Scan Results