YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 2a5f92fdf6833320439ed516bcf2dbf11b38217ab503564e836336311950eb8d.

SHA256 hash:	2a5f92fdf6833320439ed516bcf2dbf11b38217ab503564e836336311950eb8d
File size:	217'088 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	a0ea339cda37131ba42f2599b505f672
SHA1 hash:	204cdaffed171b5860becbc5156e309a15c03978
SHA3-384 hash:	fc2c62fe1f4eb30c47baf510682f9555cacc3fdd4810b535aae1ba01dd67baaac69404caeaf4888dae9f8cf995779173
First seen:	2026-02-11 17:31:20 UTC
Last seen:	Never
Sightings:	1
imphash :	4dcbc0931c6f88874a69f966c86889d9 Create hunting rule
ssdeep :	768:7DApAJmxwUh6zO5g7Wfb8BvTRbdUE6Sijv7xCIoPwWjX/1H5FIKKG4:XsASwKScoNSLDhIH9bV
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

Signature:	PUA.Win.Packer.Lccwin-2 Create hunting rule

Signature:	SecuriteInfo.com.BackDoor.HangUp.43791.UNOFFICIAL Create hunting rule

Signature:	SecuriteInfo.com.BackDoor.HangUp.43914.UNOFFICIAL Create hunting rule

Signature:	SecuriteInfo.com.BackDoor.IRC.Tdongs.13538.21428.UNOFFICIAL Create hunting rule

Signature:	Win.Malware.Qukart-6838239-0 Create hunting rule

Signature:	Win.Trojan.Crypted-29 Create hunting rule

Signature:	Win.Trojan.Obfus-38 Create hunting rule

Signature:	Win.Trojan.Padodor-10016488-0 Create hunting rule

Signature:	Win.Trojan.Qukart-6874817-0 Create hunting rule

The following YARA rules matched on the file (static analysis).

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-02-11 17:31:20 UTC Static: 1 Unpacker: 0 ClamAV: 9