YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 1b0510557d98eb75ca82ca5e3a31a8fd5d2a5b5fbb77c52bdc347b4457ffd604.

SHA256 hash:	1b0510557d98eb75ca82ca5e3a31a8fd5d2a5b5fbb77c52bdc347b4457ffd604
File size:	21'691 bytes
File download:	Original
MIME type:	application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
MD5 hash:	20868ac3d46e4db152d9986713d94a5d
SHA1 hash:	34c6592211bd657371d13c188b7a41c2b430d600
SHA3-384 hash:	ba8df984f69e2856c7911ec7fc78982ce1349c0b3509116a4ee57139e8c540d9eb41d8a40a973c4f32d4f8064ef2eff8
First seen:	2026-09-09 02:29:02 UTC
Last seen:	Never
Sightings:	1
imphash :	n/a
ssdeep :	384:kCYfb+pWKU7GZV4sogVKYofWs+4FxUE0+6L/6OemjlsMwaFO2QcE5yGa:kCsNY4soAKD0Ie1+wyRGmMwawiE5yP
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 0 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	informational_win_ole_protected Create hunting rule
Author:	Jeff White (karttoon@gmail.com) @noottrak
Description:	Identify OLE Project protection within documents.
TLP:	TLP:WHITE
Repository:	karttoon

Rule name:	vbaproject_bin Create hunting rule
Author:	CD_R0M_
Description:	{76 62 61 50 72 6f 6a 65 63 74 2e 62 69 6e} is hex for vbaproject.bin. Macros are often used by threat actors. Work in progress - Ran out of time
TLP:	TLP:WHITE
Repository:	CD-R0M

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-09-09 02:29:02 UTC Static: 2 Unpacker: 0 ClamAV: 0