YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 37265baa5a81a4010c0d15b051270bd7f9e54bd5f7deeb7ecfd581b4e7b285ad.

Scan Results

SHA256 hash: 37265baa5a81a4010c0d15b051270bd7f9e54bd5f7deeb7ecfd581b4e7b285ad
File size:155'648 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 5b709572ce2fb51c6a81eefc98521ca0
SHA1 hash: 67bc40813f483fa8e204a7e3f942718b632d06f0
SHA3-384 hash: d7213e10fb1562559ea062695935e82490d7e268b9ecd45bad3c182b99798b541050084592e4911fe0af3fa4c5d195f7
First seen:2023-01-25 09:38:03 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 3072:Wmknd/qAByvnU75tAk8TknmQoKFR7AOWuVGAN7:6ndYU7n7mQo8AJc
TLSH : T199E34B0074C19076FA7B1AB035F48AA56B3FBAB057348FE7239C963D0B645A04526B7F
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:f6d48501-9c93-11ed-98c2-42010aa4000b
File name:1370000.document2315229108.exe
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:cobalt_strike_tmp01925d3f
Create hunting rule
Author:The DFIR Report
Description:files - file ~tmp01925d3f.exe
Reference:https://thedfirreport.com
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.