YARAify Scan Results
You are viewing the YARAify database entry for the file with the SHA256 hash 41b8f660a3c132cd2cd399bc76db380235ebba33025d47f0a2dd622d9555263d.
Scan Results
| SHA256 hash: | 41b8f660a3c132cd2cd399bc76db380235ebba33025d47f0a2dd622d9555263d | |
|---|---|---|
| File size: | 188'777 bytes | |
| File download: | Original | |
| MIME type: | text/html | |
| MD5 hash: | b5be2202d4f0a4e3494bae9ef5012001 | |
| SHA1 hash: | 332a0abbd4c69ed07d48a542a447e02088a2e3f9 | |
| SHA3-384 hash: | 115a59934c41dec75ac8ea2607bf910f280a03983654724fc73bdd34d418edcf0af6b7cb3cadb8f805ac0d603d5638dd | |
| First seen: | 2025-12-26 08:05:03 UTC | |
| Last seen: | 2025-12-26 08:08:02 UTC | |
| Sightings: | 4 | |
| imphash : | n/a | |
| ssdeep : | 3072:Mb16H9Hf9Yl+Gplu6Az1ZnworlHW6JuPnFvZ10f/FNZDsMl:M3lS1ZnworlHW6JuPnFvZ10f/FNZDsMl | |
| TLSH : | n/a | |
| telfhash : | n/a | |
| gimphash : | n/a | |
| dhash icon : | n/a | |
Tasks
There are 4 tasks on YARAify for this particular file. The 10 most recent ones are shown below.
Task Information
| Task ID: | ffe25c73-e231-11f0-9df4-42010aa4000b | |
|---|---|---|
| File name: | Firefox_67.3.16.js | |
| Task parameters: | ClamAV scan: | True |
| Unpack: | True | |
| Share file: | True | |
ClamAV Results
The file matched the following open source and commercial ClamAV rules.
YARA Results
Static Analysis
The following YARA rules matched on the file (static analysis).
| Rule name: | DetectEncryptedVariants |
|---|---|
| Author: | Zinyth |
| Description: | Detects 'encrypted' in ASCII, Unicode, base64, or hex-encoded |
| TLP: | TLP:WHITE |
| Repository: | YARAify |
| Rule name: | RANSOMWARE |
|---|---|
| Author: | ToroGuitar |
| TLP: | TLP:WHITE |
| Repository: | YARAify |
Unpacker
The following YARA rules matched on the unpacked file.
Unpacked Files
The following files could be unpacked from this sample.
Task Information
| Task ID: | dc06f746-e231-11f0-9df4-42010aa4000b | |
|---|---|---|
| File name: | Firefox_67.3.16.js | |
| Task parameters: | ClamAV scan: | True |
| Unpack: | True | |
| Share file: | True | |
ClamAV Results
The file matched the following open source and commercial ClamAV rules.
YARA Results
Static Analysis
The following YARA rules matched on the file (static analysis).
| Rule name: | DetectEncryptedVariants |
|---|---|
| Author: | Zinyth |
| Description: | Detects 'encrypted' in ASCII, Unicode, base64, or hex-encoded |
| TLP: | TLP:WHITE |
| Repository: | YARAify |
| Rule name: | RANSOMWARE |
|---|---|
| Author: | ToroGuitar |
| TLP: | TLP:WHITE |
| Repository: | YARAify |
Unpacker
The following YARA rules matched on the unpacked file.
Unpacked Files
The following files could be unpacked from this sample.
Task Information
| Task ID: | b87e2fcd-e231-11f0-9df4-42010aa4000b | |
|---|---|---|
| File name: | Firefox_67.3.16.js | |
| Task parameters: | ClamAV scan: | True |
| Unpack: | True | |
| Share file: | True | |
ClamAV Results
The file matched the following open source and commercial ClamAV rules.
YARA Results
Static Analysis
The following YARA rules matched on the file (static analysis).
| Rule name: | DetectEncryptedVariants |
|---|---|
| Author: | Zinyth |
| Description: | Detects 'encrypted' in ASCII, Unicode, base64, or hex-encoded |
| TLP: | TLP:WHITE |
| Repository: | YARAify |
| Rule name: | RANSOMWARE |
|---|---|
| Author: | ToroGuitar |
| TLP: | TLP:WHITE |
| Repository: | YARAify |
Unpacker
The following YARA rules matched on the unpacked file.
Unpacked Files
The following files could be unpacked from this sample.
Task Information
| Task ID: | 957495e6-e231-11f0-9df4-42010aa4000b | |
|---|---|---|
| File name: | Firefox_67.3.16.js | |
| Task parameters: | ClamAV scan: | True |
| Unpack: | True | |
| Share file: | True | |
ClamAV Results
The file matched the following open source and commercial ClamAV rules.
YARA Results
Static Analysis
The following YARA rules matched on the file (static analysis).
| Rule name: | DetectEncryptedVariants |
|---|---|
| Author: | Zinyth |
| Description: | Detects 'encrypted' in ASCII, Unicode, base64, or hex-encoded |
| TLP: | TLP:WHITE |
| Repository: | YARAify |
| Rule name: | RANSOMWARE |
|---|---|
| Author: | ToroGuitar |
| TLP: | TLP:WHITE |
| Repository: | YARAify |
Unpacker
The following YARA rules matched on the unpacked file.
Unpacked Files
The following files could be unpacked from this sample.