YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 338d79bf98f3ca8b170c459fa5d20a575d7e37e7a7d4fba8d8a8c8e8581839d9.

Scan Results

SHA256 hash: 338d79bf98f3ca8b170c459fa5d20a575d7e37e7a7d4fba8d8a8c8e8581839d9
File size:308'075 bytes
File download: Original
MIME type:application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
MD5 hash: 1add02a0f261cca33b865322f765aa73
SHA1 hash: fd09ed9de3641d7d2d2d63dc5b4ccc8af05ce5b1
SHA3-384 hash: f3bf7379d738ab2050afa2ea8cc804014bcb48f45072aa1cfadedbcdffef21c3c9432d9fe53870d7a94b2c586ff55efb
First seen:2026-04-27 15:01:32 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 6144:+IKtNZlUeXndiFroyVd10S2i8yYhn3Tc7tPab+iMInXPVhky:fKplbasyf03kGSdab+iMInfVhky
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:fa69a958-4249-11f1-badc-42010aa4000b
File name:1add02a0f261cca33b865322f765aa73
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:vbaproject_bin
Create hunting rule
Author:CD_R0M_
Description:{76 62 61 50 72 6f 6a 65 63 74 2e 62 69 6e} is hex for vbaproject.bin. Macros are often used by threat actors. Work in progress - Ran out of time
TLP:TLP:WHITE
Repository:CD-R0M
Rule name:Weedhack_Family_Generic
Create hunting rule
Author:jlab
Description:Generic Weedhack family detection
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.