YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 87aaa6f27c66b888fcb5acb76a3eca00b11b9c0165bf0472689d099f4be6941b.

SHA256 hash:	87aaa6f27c66b888fcb5acb76a3eca00b11b9c0165bf0472689d099f4be6941b
File size:	349'498 bytes
File download:	Original
MIME type:	application/pdf
MD5 hash:	603e9cea760889ab647db558cfb4b077
SHA1 hash:	f6cd27c728f5704de2f48f39714e3501df8f3d8a
SHA3-384 hash:	9943198ca7008553aadeb58f79c9069438904dc5047310fd10e5549b1e9caa89fb35c128fdf1168b72e7bb9d46befbed
First seen:	2025-10-03 03:16:14 UTC
Last seen:	Never
Sightings:	1
imphash :	n/a
ssdeep :	6144:dbM/EUN02Or5epF6dWB4+C5trZDUTZJUYpwzZrNKF3ZA09tbf:dosF2Or5epFg22/BUTZJpgFwPAcZf
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task ID:	518be93c-a007-11f0-adeb-42010aa4000b
File name:	API_[CẬP NHẬT] [BGT] [EY] 1 HÀNH TRÌNH BAY - NHÂN 3 ƯU ĐÃI.pdf
Task parameters:	ClamAV scan:	True
	Unpack:	False
	Share file:	False

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	CP_AllMal_Detector Create hunting rule
Author:	DiegoAnalytics
Description:	CrossPlatform All Malwares Detector: Detect PE, ELF, Mach-O, scripts, archives; overlay, obfuscation, encryption, spoofing, hiding, high entropy, network communication
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	vmdetect Create hunting rule
Author:	nex
Description:	Possibly employs anti-virtualization techniques
TLP:	TLP:WHITE
Repository:

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2025-10-03 03:16:14 UTC Static: 2 Unpacker: 0 ClamAV: 0