YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 21e259c13cfecb1c992036cd4b6ce6baa7be9415ea8a3fe3e107303e0fd3cd9d.

SHA256 hash:	21e259c13cfecb1c992036cd4b6ce6baa7be9415ea8a3fe3e107303e0fd3cd9d
File size:	217'088 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	0cbeb9990423f2d2123467250c8c552f
SHA1 hash:	a7c8463737870622ab007e68125d73340d1937b9
SHA3-384 hash:	4081544bd70650626041c858f9b1ca8acd98a25a436ec41574a0973ee970b34bed8b697fa2a28d4b069670a3815aa8e1
First seen:	2026-02-11 17:31:18 UTC
Last seen:	Never
Sightings:	1
imphash :	4dcbc0931c6f88874a69f966c86889d9 Create hunting rule
ssdeep :	768:7DApAJmxwUh6zO5g7Wfb8BvTRbdUE6Sijv7xCIgkHjX/1H52IKKG4:XsASwKScoNSLDh/D9UV
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

Signature:	PUA.Win.Packer.Lccwin-2 Create hunting rule

Signature:	SecuriteInfo.com.BackDoor.HangUp.43791.UNOFFICIAL Create hunting rule

Signature:	SecuriteInfo.com.BackDoor.HangUp.43914.UNOFFICIAL Create hunting rule

Signature:	SecuriteInfo.com.BackDoor.IRC.Tdongs.13538.21428.UNOFFICIAL Create hunting rule

Signature:	Win.Malware.Qukart-6838239-0 Create hunting rule

Signature:	Win.Trojan.Crypted-30 Create hunting rule

Signature:	Win.Trojan.Obfus-38 Create hunting rule

Signature:	Win.Trojan.Padodor-10016488-0 Create hunting rule

Signature:	Win.Trojan.Qukart-6874817-0 Create hunting rule

The following YARA rules matched on the file (static analysis).

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-02-11 17:31:18 UTC Static: 1 Unpacker: 0 ClamAV: 9