YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 39ee896fe0df226dfcfe6d1a08e1a4dc7df31262e90d0c2c05549b46bc700ec0.

SHA256 hash:	39ee896fe0df226dfcfe6d1a08e1a4dc7df31262e90d0c2c05549b46bc700ec0
File size:	28'485 bytes
File download:	Original
MIME type:	application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
MD5 hash:	7e10acb5df38a65bb26bf82084aec304
SHA1 hash:	a39d3f057d3a8a470968c34ca7cc94da44db7f1c
SHA3-384 hash:	e7f06c47ed69ac1db7acd5e1a0cf6a6b526b99cab86ea6de1f9e8f41e766f6721938d58179931d4ac6e332e6cfe3b98d
First seen:	2026-09-19 11:50:30 UTC
Last seen:	Never
Sightings:	1
imphash :	n/a
ssdeep :	768:gWdtbDKn1R5c2/4BPxA7Z1gMC+yGjye40u:gWd5DimxALgJ/
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 0 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

Signature:	SecuriteInfo.com.Office.Macro-16.UNOFFICIAL Create hunting rule

The following YARA rules matched on the file (static analysis).

Rule name:	informational_win_ole_protected Create hunting rule
Author:	Jeff White (karttoon@gmail.com) @noottrak
Description:	Identify OLE Project protection within documents.
TLP:	TLP:WHITE
Repository:	karttoon

Rule name:	telebot_framework Create hunting rule
Author:	vietdx.mb
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	vbaproject_bin Create hunting rule
Author:	CD_R0M_
Description:	{76 62 61 50 72 6f 6a 65 63 74 2e 62 69 6e} is hex for vbaproject.bin. Macros are often used by threat actors. Work in progress - Ran out of time
TLP:	TLP:WHITE
Repository:	CD-R0M

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-09-19 11:50:30 UTC Static: 3 Unpacker: 0 ClamAV: 1