🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 10ffcc05526bbe3d265cfb7c4e8e1a2fe0b0c07123d0f8a26adb693482d64d5e.

Scan Results


SHA256 hash: 10ffcc05526bbe3d265cfb7c4e8e1a2fe0b0c07123d0f8a26adb693482d64d5e
File size:8'192 bytes
File download: Original
MIME type:application/octet-stream
MD5 hash: 9f782d0de40dafb14e56557be9b4bbe6
SHA1 hash: a797adcf4a9f798bb676b2ce6c573013c2fd7bdd
SHA3-384 hash: f89c9c4fb8474e71e101f5c35fdbee2f6814332f12cf977f50e4548658c398cca095b83e37831e82d751960ec15f4b93
First seen:2026-10-31 09:51:39 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 96:gkMWyG4DgdZHYt+nTkIJxWBphJZqyS4kyclHehabl8wwkjTQ:L3yZDgdZHLTzJxWbhJ0L4HMb3jQ
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks


There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information


Task ID:ab654051-d510-11f1-ae09-42010aa4000b
File name:30000.shc
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results


The file matched the following open source and commercial ClamAV rules.

YARA Results


Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:exploit_any_poppopret
Author:Jeff White [karttoon@gmail.com] @noottrak
Description:Identify POP -> POP -> RET opcodes for quick ROP Gadget creation in target binaries.
TLP:TLP:WHITE
Repository:karttoon

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files


The following files could be unpacked from this sample.