YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 3cb7779b30e001a9ac790f4253d2214e3c022113e208afb313b17886807f35f0.

Scan Results

SHA256 hash: 3cb7779b30e001a9ac790f4253d2214e3c022113e208afb313b17886807f35f0
File size:425'168 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 12f79caa344b8b13be54301d745b857b
SHA1 hash: 6108894120300a24a6f8d8fed63a3a96befe8b98
SHA3-384 hash: 7a08dd52fa14048770d48300b50a995e7a68d9e5f5c556a2c7f66cc8c67f15132516259967c665a0914075b423c79204
First seen:2025-11-21 18:57:24 UTC
Last seen:Never
Sightings:1
imphash : 3e3d633779e35448851e7a9ca7e72522
Create hunting rule
ssdeep : 6144:BafcE1xphhXDsBRHJeqqqdNnXDsBRHJeq:UtzwHJeS7nzwHJe
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon : 62e68c18148ca0e0
Create hunting rule

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:ea957406-c70b-11f0-a73e-42010aa4000b
File name:12f79caa344b8b13be54301d745b857b
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Malware.Cosmu-10013266-0
Create hunting rule
Signature:Win.Malware.Cosmu-10019841-0
Create hunting rule
Signature:Win.Malware.Jaik-10022565-0
Create hunting rule
Signature:Win.Worm.Cosmu-10018412-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:INDICATOR_EXE_Packed_MPress
Create hunting rule
Author:ditekSHen
Description:Detects executables built or packed with MPress PE compressor
TLP:TLP:WHITE
Repository:diˈtekSHən
Rule name:TeslaCryptPackedMalware
Create hunting rule
TLP:TLP:WHITE
Repository:MalwareBazaar

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.