YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash deb59c54fa907f8b5ae8d689c88c1c04623f4d98f401aa8c58fe07d98256a0bc.

SHA256 hash:	deb59c54fa907f8b5ae8d689c88c1c04623f4d98f401aa8c58fe07d98256a0bc
File size:	1'064'960 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	b6b398f63e6a0058e35e6d1f41a77b11
SHA1 hash:	34caf27059294a1a421696cde577a116960812d1
SHA3-384 hash:	624e81a9e85c5a8f6244156a3c0a5d36e06b7f071715b1407cf53bc49b91ab4094e41313c795cbdbbd42f6c46bebc9b0
First seen:	2026-01-06 14:05:44 UTC
Last seen:	Never
Sightings:	1
imphash :	b9bd42227fd4867f722ab9dfc47cedc6 Create hunting rule
ssdeep :	6144:grpFGbrTaJ6qyXhxzLJ9Fx5LOz3+nJfPYHePbr52Kz/PEKgBSha:gdFt6qyxxJ/x8T+nJfA+RH/d4ea
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

Signature:	Win.Malware.Agent-9870952-0 Create hunting rule

The following YARA rules matched on the file (static analysis).

Rule name:	classified
Description:	classified

Rule name:	golang_bin_JCorn_CSC846 Create hunting rule
Author:	Justin Cornwell
Description:	CSC-846 Golang detection ruleset
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	pe_detect_tls_callbacks Create hunting rule
Author:
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	Trojan_Win_Generic_101 Create hunting rule
Author:	FireEye
Description:	Detects FireEye Windows trojan
Reference:	https://www.fireeye.com/blog/products-and-services/2020/12/fireeye-shares-details-of-recent-cyber-attack-actions-to-protect-community.html
TLP:	TLP:WHITE
Repository:	Neo23x0

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-01-06 14:05:44 UTC Static: 5 Unpacker: 0 ClamAV: 1