YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 11e280df0c7c47007015924cfcf66350e862f14655ed919c96e792b19c83928d.

SHA256 hash:	11e280df0c7c47007015924cfcf66350e862f14655ed919c96e792b19c83928d
File size:	217'088 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	4acb2510ae2c358309b9d777dda3bdc7
SHA1 hash:	405b06ad431e6d8eb056d7c7fb4c5f5457d7bb34
SHA3-384 hash:	6b0c7750ffbb538f03778211713c2b001daee56c03eabed5e6ae3c6bff6ed7f2e0778c38fd71496d150f472fabf30abc
First seen:	2025-11-21 02:44:47 UTC
Last seen:	Never
Sightings:	1
imphash :	3f8d79e42b0b7cecf379b1ddce4e422a Create hunting rule
ssdeep :	768:sDApAJmxwUh6zO5g7Wfb8BvTRbdUE6Sijv7xCI3UljX/1H5qXdnhg20a0kXdnhAo:esASwKScoNSLDhkF96H1juDU
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

Signature:	PUA.Win.Packer.Lccwin-2 Create hunting rule

Signature:	SecuriteInfo.com.BackDoor.HangUp.43791.UNOFFICIAL Create hunting rule

Signature:	SecuriteInfo.com.BackDoor.HangUp.43914.UNOFFICIAL Create hunting rule

Signature:	SecuriteInfo.com.BackDoor.IRC.Tdongs.13538.21428.UNOFFICIAL Create hunting rule

Signature:	Win.Malware.Qukart-6838239-0 Create hunting rule

Signature:	Win.Trojan.Berbew-9994138-0 Create hunting rule

Signature:	Win.Trojan.Obfus-38 Create hunting rule

Signature:	Win.Trojan.Padodor-10016488-0 Create hunting rule

Signature:	Win.Trojan.Qukart-6874817-0 Create hunting rule

The following YARA rules matched on the file (static analysis).

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2025-11-21 02:44:47 UTC Static: 1 Unpacker: 0 ClamAV: 9