YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 2847f6e357bf80e38d6813c98e2fb04092e6a0b89df937cdaea2921d17dc8f2d.

SHA256 hash:	2847f6e357bf80e38d6813c98e2fb04092e6a0b89df937cdaea2921d17dc8f2d
File size:	406'016 bytes
File download:	Original
MIME type:	application/vnd.ms-excel
MD5 hash:	aedd79ce98d49fe6a513ecf4d4b69fa5
SHA1 hash:	1d4fb3dc15067b70c365acd800fd5cde7f2d14d5
SHA3-384 hash:	0f50983076eb123370ce83f12b3bc54d89070f0a2b18b9d4ad4f291e3cea2b2288348cf365bc7b42ecbeed6b4f06a538
First seen:	2026-10-10 07:04:03 UTC
Last seen:	Never
Sightings:	1
imphash :	n/a
ssdeep :	6144:rxEtjPOtioVjDGUU1qfDlavx+W+LIfdAEFhboTOWA:eFhbf9
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	informational_win_ole_protected Create hunting rule
Author:	Jeff White (karttoon@gmail.com) @noottrak
Description:	Identify OLE Project protection within documents.
TLP:	TLP:WHITE
Repository:	karttoon

Rule name:	MULTI_Malware_Unknown_ForgeAuto_57b77e4a_Extrait Create hunting rule
Author:	Marjoriefort
Description:	Detects Unknown (archive, etat extrait)
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	MULTI_Malware_Unknown_ForgeAuto_e38c53ae_Extrait Create hunting rule
Author:	Marjoriefort
Description:	Detects Unknown (archive, etat extrait)
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	test_Malaysia Create hunting rule
Author:	rectifyq
Description:	Detects file containing malaysia string
TLP:	TLP:WHITE
Repository:	YARAify

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-10-10 07:04:03 UTC Static: 5 Unpacker: 0 ClamAV: 0