YARAify Scan Results
You are viewing the YARAify database entry for the file with the SHA256 hash 309a02bf084c78dc98627209ab63cff1b436f42bcf083e712b780d4ba63bd0ba.
Scan Results
| SHA256 hash: | 309a02bf084c78dc98627209ab63cff1b436f42bcf083e712b780d4ba63bd0ba | |
|---|---|---|
| File size: | 19'499 bytes | |
| File download: | Original | |
| MIME type: | text/x-shellscript | |
| MD5 hash: | f7543a2af2209c37a1ac7b746ab6b551 | |
| SHA1 hash: | 6627d21e7d13db56e4b83d09f2a3aed09369a61a | |
| SHA3-384 hash: | bd13a5aaf98b7535768d5af63a0c57f7777f2edfa642eac48ccaa9df32e2e8bcba75637e487cde3f5d8f68569267ef12 | |
| First seen: | 2026-03-24 03:49:04 UTC | |
| Last seen: | Never | |
| Sightings: | 1 | |
| imphash : | n/a | |
| ssdeep : | 384:mFcuQpWx+BL0SWL0gtzsO9a4cbddrME8jyfzsO9a4cbddrME8jy4:mF8i+BL0SI02zsP4cbddr7zsP4cbddrk | |
| TLSH : | n/a | |
| telfhash : | n/a | |
| gimphash : | n/a | |
| dhash icon : | n/a | |
Tasks
There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.
Task Information
| Task ID: | 6711471d-2734-11f1-b47f-42010aa4000b | |
|---|---|---|
| File name: | 309a02bf084c78dc98627209ab63cff1b436f42bcf083e712b780d4ba63bd0ba.sh | |
| Task parameters: | ClamAV scan: | True |
| Unpack: | False | |
| Share file: | True | |
ClamAV Results
The file matched the following open source and commercial ClamAV rules.
No matches
YARA Results
Static Analysis
The following YARA rules matched on the file (static analysis).
| Rule name: | SUSP_LNX_Base64_Exec_Apr24 |
|---|---|
| Author: | Christian Burkard |
| Description: | Detects suspicious base64 encoded shell commands (as seen in Palo Alto CVE-2024-3400 exploitation) |
| Reference: | Internal Research |
| TLP: | TLP:WHITE |
Unpacker
The following YARA rules matched on the unpacked file.
Disabled by submitter
Unpacked Files
The following files could be unpacked from this sample.
Disabled by submitter