YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash e2e24423651af6162ed85317eed3f4729c832b50546a5eef3c67d173297602da.

SHA256 hash:	e2e24423651af6162ed85317eed3f4729c832b50546a5eef3c67d173297602da
File size:	227'167 bytes
File download:	Original
MIME type:	text/html
MD5 hash:	70d3bf7f7b52547cc0d009a33bfa8ada
SHA1 hash:	682d4ecd4fe0594ad8c952a53dc9ab8ca3988c43
SHA3-384 hash:	cc110438b24f29c9ada4d6fc8c9a2048b6b9740199289c3d84bca999dab807e25a65bedf78922c7f70fcfe6cae8824fe
First seen:	2025-10-03 03:16:20 UTC
Last seen:	Never
Sightings:	1
imphash :	n/a
ssdeep :	6144:CajpSYt72uB8zd3nuatHiuZ1aYxs7TA7V+5Qw7Sw2:Ca1SYtRc33CMaoQTA7VH
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

Signature:	SecuriteInfo.com.PUA.Telegrambot-21.UNOFFICIAL Create hunting rule

Signature:	SecuriteInfo.com.PUA.Telegrambot-7.UNOFFICIAL Create hunting rule

The following YARA rules matched on the file (static analysis).

Rule name:	ach_202408_html_TelegramBot Create hunting rule
Author:	abuse.ch
Description:	Detects potential JavaScript Telegram Bot inside HTML code
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	CP_Script_Inject_Detector Create hunting rule
Author:	DiegoAnalytics
Description:	Detects attempts to inject code into another process across PE, ELF, Mach-O binaries
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	classified
Author:	classified

Rule name:	telegram_bot_api Create hunting rule
Author:	rectifyq
Description:	Detects file containing Telegram Bot API
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	classified
Author:	classified

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2025-10-03 03:16:21 UTC Static: 7 Unpacker: 0 ClamAV: 2