YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 0a8cfacb3d61348574e1df075faeb05284a10751dca69dc6e464f464dfa8d887.

Scan Results

SHA256 hash: 0a8cfacb3d61348574e1df075faeb05284a10751dca69dc6e464f464dfa8d887
File size:5'757'952 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 63d5eecbb8b4b677dca659cf02610c8d
SHA1 hash: 04109ecb6379e06b3af98cf199453335e235fc2a
SHA3-384 hash: d2c4223c041621b4bb4a612613b817f9a6b4768728b28e648d5d9c80a4abe46c5bf15f0e903c4958c35002cc87c2c5e6
First seen:2026-03-14 15:30:05 UTC
Last seen:Never
Sightings:1
imphash : ab48de9810f4cbcfaca67b96ba2cfc48
Create hunting rule
ssdeep : 98304:Eb4jytHZp6+Wvl3D1tBpzOUV3m+hVGiqhx0RHbNvR5D1toKOQ5MpIcRnVKN1f:EbUyt5LclppiUFm+X1v7lD1tZOBFVK3f
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:ad0b76bf-1fba-11f1-b47f-42010aa4000b
File name:63d5eecbb8b4b677dca659cf02610c8d
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:SecuriteInfo.com.Trojan.Click3.27941.UNOFFICIAL
Create hunting rule
Signature:Win.Malware.Zusy-9952840-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:DebuggerCheck__API
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:golang_bin_JCorn_CSC846
Create hunting rule
Author:Justin Cornwell
Description:CSC-846 Golang detection ruleset
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.