YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 2dc01b81b8e1583e69581b51e9e221d805c469e503db7410c22f9f7d9fd089cb.

SHA256 hash:	2dc01b81b8e1583e69581b51e9e221d805c469e503db7410c22f9f7d9fd089cb
File size:	328'080 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	6e4865375f76ffa96623ab78cb2856ca
SHA1 hash:	e121cc91e3b1b9322fe9d53263e480fbfd01d8a1
SHA3-384 hash:	ea914b6a84127ce1bbfca149e4f1000cf78154de1db1942555fdcb449a68af8961e37e609f3c7d488bb6664c37b84d20
First seen:	2026-01-15 15:28:27 UTC
Last seen:	Never
Sightings:	1
imphash :	5228e7047a0b328e3b64ee71c48d4223 Create hunting rule
ssdeep :	3072:lAHNSduf+LnpIP+I+VrRJDwg2cITRU700M+4eYH6KUskuJsJsLFix/Nksym+q/CH:CYMJvFU4h+4eQPSVK0KasPn
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	8c333333174c3002 Create hunting rule

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	cobalt_strike_tmp01925d3f Create hunting rule
Author:	The DFIR Report
Description:	files - file ~tmp01925d3f.exe
Reference:	https://thedfirreport.com
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	DebuggerCheck__API Create hunting rule
Reference:	https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:	TLP:WHITE

Rule name:	golang_bin_JCorn_CSC846 Create hunting rule
Author:	Justin Cornwell
Description:	CSC-846 Golang detection ruleset
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	pe_detect_tls_callbacks Create hunting rule
Author:
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	PE_Digital_Certificate Create hunting rule
Author:	albertzsigovits
TLP:	TLP:WHITE
Repository:

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-01-15 15:28:27 UTC Static: 5 Unpacker: 0 ClamAV: 0