YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 17371ba16b367b3679bc462ea448a7376b7f5853bd929f3787d2dc1ba1dd3c88.

SHA256 hash:	17371ba16b367b3679bc462ea448a7376b7f5853bd929f3787d2dc1ba1dd3c88
File size:	217'088 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	722cb0b466fc2bcefa8229cb2875f477
SHA1 hash:	923944b0670546bf66a32f0c31eaa20b315b44b5
SHA3-384 hash:	a25fadab1e0180ca9190b56e0b06771395e99d951799ce8f0ec543674b67f56113aa26e7a3c7144b6d57afb6d3746c59
First seen:	2025-11-21 02:44:47 UTC
Last seen:	Never
Sightings:	1
imphash :	3f8d79e42b0b7cecf379b1ddce4e422a Create hunting rule
ssdeep :	768:sDApAJmxwUh6zO5g7Wfb8BvTRbdUE6Sijv7xCIY2fjX/1H5NzyXdnhg20a0kXdn/:esASwKScoNSLDhFb970H1juDU
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

Signature:	PUA.Win.Packer.Lccwin-2 Create hunting rule

Signature:	SecuriteInfo.com.BackDoor.HangUp.43791.UNOFFICIAL Create hunting rule

Signature:	SecuriteInfo.com.BackDoor.HangUp.43914.UNOFFICIAL Create hunting rule

Signature:	SecuriteInfo.com.BackDoor.IRC.Tdongs.13538.21428.UNOFFICIAL Create hunting rule

Signature:	Win.Malware.Qukart-6838239-0 Create hunting rule

Signature:	Win.Trojan.Berbew-9994138-0 Create hunting rule

Signature:	Win.Trojan.Obfus-38 Create hunting rule

Signature:	Win.Trojan.Padodor-10016488-0 Create hunting rule

Signature:	Win.Trojan.Qukart-6874817-0 Create hunting rule

The following YARA rules matched on the file (static analysis).

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2025-11-21 02:44:47 UTC Static: 1 Unpacker: 0 ClamAV: 9