YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 34d392bbec706bb5ec420d3af969c1d8ca290a028d463c4379aaa5010b619d54.

SHA256 hash:	34d392bbec706bb5ec420d3af969c1d8ca290a028d463c4379aaa5010b619d54
File size:	412'794 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	9eab97a7a8fc5a3594e8948fc6229e5b
SHA1 hash:	063fc6d06c81a1f5b127e63a8898ff3d5bafa416
SHA3-384 hash:	52f4be35c4b340d3794c3f7028fc130a2f49cd18236b170921541a716e189b717744c01473adfc6213b97b253758592f
First seen:	2023-01-25 09:30:32 UTC
Last seen:	Never
Sightings:	1
imphash :	a4dea81f5680b2f5e33c3b2656483a28 Create hunting rule
ssdeep :	6144:8caJul4qMyfnp7xPxRnBfhM2CxYT52MZM1dI:CurMOnpNP7nhhM2JM
TLSH :	T1CE94E003F9E1C432D0A14BF91D36C6B8B93BB5B11D64814BF7AD8B0E7E78680A85D257 Create hunting rule
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

Signature:	PUA.Win.Packer.Lccwin-2 Create hunting rule

Signature:	Win.Malware.Picsys-6803925-0 Create hunting rule

Signature:	Win.Worm.Picsys-9630818-0 Create hunting rule

The following YARA rules matched on the file (static analysis).

Rule name:	QbotStuff Create hunting rule
Author:	anonymous
TLP:	TLP:WHITE
Repository:	MalwareBazaar

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2023-01-25 09:30:32 UTC Static: 1 Unpacker: 0 ClamAV: 3