YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 241b3aaa143e99947aa8fb7e610ca488a3c5accedbdc3392c556727d80d27374.

Scan Results

SHA256 hash: 241b3aaa143e99947aa8fb7e610ca488a3c5accedbdc3392c556727d80d27374
File size:380'928 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 057dccc931767a59aa203854548a7865
SHA1 hash: ac39d76f38c7795f5f25acb6a3f38e674cd3e905
SHA3-384 hash: 6dacf477ba6a7d58c9d5cbd6227a6a59ad934de2c0c0866ec9206780b6e0256b755db590860896ce65141c432ca1c73e
First seen:2025-11-21 00:00:18 UTC
Last seen:Never
Sightings:1
imphash : 2e1947c59ff7ee8c037382d0a0aec05a
Create hunting rule
ssdeep : 6144:tAdgUkQx+HXGidCzj8LBb8Rw5Jdypyf6aCXYfhiW:taqQx+H2i+8LBNbdypazCXY
TLSH : T139843C95DFA0CA20F07780F87D268395A6BED634C41A8C976B685D2C3FB2C67B145B13
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon : 04dc9aaa92cec454
Create hunting rule

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:10cb1e54-c66d-11f0-adeb-42010aa4000b
File name:057dccc931767a59aa203854548a7865
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Dropper.Remcos-9981045-1
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:SEH__vba
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.