YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 285b8b29e7fdb9347602fd9165c4308e70c8b0859ed068625d0217e1f029b48c.

Scan Results

SHA256 hash: 285b8b29e7fdb9347602fd9165c4308e70c8b0859ed068625d0217e1f029b48c
File size:95'723'520 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: bd5c384851b6ca4e226fa8ac1582bda0
SHA1 hash: 4de90d3207ba6617aff7c9fd0e8176d7f44f6cd3
SHA3-384 hash: 9da04524baa96fa315c552083d60da72a6a31a45224d7008c936f96ad53e327966e3c3b493dfe20ea552d42e6cc404d9
First seen:2026-03-22 19:15:38 UTC
Last seen:Never
Sightings:1
imphash : 603d7040b5058e3e0fc7508b05e0cdab
Create hunting rule
ssdeep : 1572864:tOh/lJUnThpZeeh24X3hQQbrpdx/lvUSfpqBUQy9IDYnEJ90c8LF:oh/lC1JhbX3hQQbrpdx/lHpXLG5JqF
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:8391b92d-2623-11f1-b47f-42010aa4000b
File name:48f0000.dll
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:golang_bin_JCorn_CSC846
Create hunting rule
Author:Justin Cornwell
Description:CSC-846 Golang detection ruleset
TLP:TLP:WHITE
Repository:YARAify
Rule name:HeavensGate
Create hunting rule
Author:kevoreilly
Description:Heaven's Gate: Switch from 32-bit to 64-mode
TLP:TLP:WHITE
Repository:CAPE
Rule name:meth_peb_parsing
Create hunting rule
Author:Willi Ballenthin
TLP:TLP:WHITE
Repository:YARAify
Rule name:TH_AntiVM_MassHunt_Win_Malware_2026_CYFARE
Create hunting rule
Author:CYFARE
Description:Detects Windows malware employing anti-VM / anti-sandbox evasion techniques across VMware, VirtualBox, Hyper-V, QEMU, Xen, and generic sandbox environments
Reference:https://cyfare.net/
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.