YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 647ccce401c7644524d6f5ca09de721faf06200290d27c5908b0a1f676347efd.

Scan Results

SHA256 hash: 647ccce401c7644524d6f5ca09de721faf06200290d27c5908b0a1f676347efd
File size:378'913 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 140cb24e892ffb79203fba13d828614f
SHA1 hash: ab71ef3807572db52b8f8487257f90c0fb1c39f8
SHA3-384 hash: 9ab57f4a81986c4bcd43d1e89b70adc57b61c05658f9e5b57edb92dc2804e5d50e8932e55b9861ed70d7cdd350643adf
First seen:2025-11-21 19:02:57 UTC
Last seen:Never
Sightings:1
imphash : 08b656407b8d307979dc72c3fcc683a8
Create hunting rule
ssdeep : 3072:3qPCZtdoNpVGEhi/2U5BTzbzTXcKWJvvMQkO+H/uDs+H7Alw+qJeEofoWh:ACZlQ+HzzgKWGw+HWDs+H7qDqJe1
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:b10b2d78-c70c-11f0-a73e-42010aa4000b
File name:140cb24e892ffb79203fba13d828614f
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:SecuriteInfo.com.Trojan.Swizzor.Gen.2.15188.UNOFFICIAL
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:upx_3
Create hunting rule
Author:Kevin Falcoz
Description:UPX 3.X
TLP:TLP:WHITE
Rule name:upx_largefile
Create hunting rule
Author:k3nr9
TLP:TLP:WHITE
Repository:YARAify
Rule name:UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:UPXv20MarkusLaszloReiser
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:vmdetect
Create hunting rule
Author:nex
Description:Possibly employs anti-virtualization techniques
TLP:TLP:WHITE
Repository:
Rule name:classified
Author:classified
Description:classified
TLP :TLP:AMBER

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.