YARAify Scan Results
You are viewing the YARAify database entry for the file with the SHA256 hash 3e02f005492ea13dbc146e06c7482ddeb9cdf7fe50f67e29bca4c02e7157f99f.
Scan Results
| SHA256 hash: | 3e02f005492ea13dbc146e06c7482ddeb9cdf7fe50f67e29bca4c02e7157f99f | |
|---|---|---|
| File size: | 109'083 bytes | |
| File download: | Original | |
| MIME type: | text/html | |
| MD5 hash: | 2f3bae749aa2a9c427f6d62819006bd2 | |
| SHA1 hash: | f53887972d4e2db76cda4cebcd58b2704c7b4b60 | |
| SHA3-384 hash: | cc8970668305056109920776dcc64d8da2be46c4f84509b493b002b24d550e6ff7b0a3f146989f17aca6330e32938a43 | |
| First seen: | 2026-05-19 18:54:03 UTC | |
| Last seen: | 2026-05-19 18:57:01 UTC | |
| Sightings: | 4 | |
| imphash : | n/a | |
| ssdeep : | 3072:QB8jrlaRCJ1z4XZ7LIOmPjnuVanEupZDy7c/Al8nsN0:QNZwD1 | |
| TLSH : | n/a | |
| telfhash : | n/a | |
| gimphash : | n/a | |
| dhash icon : | n/a | |
Tasks
There are 4 tasks on YARAify for this particular file. The 10 most recent ones are shown below.
Task Information
| Task ID: | 84f597f2-53b4-11f1-badc-42010aa4000b | |
|---|---|---|
| File name: | 3e02f005492ea13dbc146e06c7482ddeb9cdf7fe50f67e29bca4c02e7157f99f.html | |
| Task parameters: | ClamAV scan: | True |
| Unpack: | True | |
| Share file: | True | |
ClamAV Results
The file matched the following open source and commercial ClamAV rules.
YARA Results
Static Analysis
The following YARA rules matched on the file (static analysis).
| Rule name: | classified |
|---|---|
| Author: | classified |
| Description: | classified |
| TLP : | TLP:GREEN |
| Rule name: | classified |
|---|---|
| Author: | classified |
| Description: | classified |
| TLP : | TLP:GREEN |
| Rule name: | Sus_CMD_Powershell_Usage |
|---|---|
| Author: | XiAnzheng |
| Description: | May Contain(Obfuscated or no) Powershell or CMD Command that can be abused by threat actor(can create FP) |
| TLP: | TLP:WHITE |
| Repository: | YARAify |
Unpacker
The following YARA rules matched on the unpacked file.
Unpacked Files
The following files could be unpacked from this sample.
Task Information
| Task ID: | 61dcf8ac-53b4-11f1-badc-42010aa4000b | |
|---|---|---|
| File name: | 3e02f005492ea13dbc146e06c7482ddeb9cdf7fe50f67e29bca4c02e7157f99f.html | |
| Task parameters: | ClamAV scan: | True |
| Unpack: | True | |
| Share file: | True | |
ClamAV Results
The file matched the following open source and commercial ClamAV rules.
YARA Results
Static Analysis
The following YARA rules matched on the file (static analysis).
| Rule name: | classified |
|---|---|
| Author: | classified |
| Description: | classified |
| TLP : | TLP:GREEN |
| Rule name: | classified |
|---|---|
| Author: | classified |
| Description: | classified |
| TLP : | TLP:GREEN |
| Rule name: | Sus_CMD_Powershell_Usage |
|---|---|
| Author: | XiAnzheng |
| Description: | May Contain(Obfuscated or no) Powershell or CMD Command that can be abused by threat actor(can create FP) |
| TLP: | TLP:WHITE |
| Repository: | YARAify |
Unpacker
The following YARA rules matched on the unpacked file.
Unpacked Files
The following files could be unpacked from this sample.
Task Information
| Task ID: | 3e76f812-53b4-11f1-badc-42010aa4000b | |
|---|---|---|
| File name: | 3e02f005492ea13dbc146e06c7482ddeb9cdf7fe50f67e29bca4c02e7157f99f.html | |
| Task parameters: | ClamAV scan: | True |
| Unpack: | True | |
| Share file: | True | |
ClamAV Results
The file matched the following open source and commercial ClamAV rules.
YARA Results
Static Analysis
The following YARA rules matched on the file (static analysis).
| Rule name: | classified |
|---|---|
| Author: | classified |
| Description: | classified |
| TLP : | TLP:GREEN |
| Rule name: | classified |
|---|---|
| Author: | classified |
| Description: | classified |
| TLP : | TLP:GREEN |
| Rule name: | Sus_CMD_Powershell_Usage |
|---|---|
| Author: | XiAnzheng |
| Description: | May Contain(Obfuscated or no) Powershell or CMD Command that can be abused by threat actor(can create FP) |
| TLP: | TLP:WHITE |
| Repository: | YARAify |
Unpacker
The following YARA rules matched on the unpacked file.
Unpacked Files
The following files could be unpacked from this sample.
Task Information
| Task ID: | 1b19daf1-53b4-11f1-badc-42010aa4000b | |
|---|---|---|
| File name: | 3e02f005492ea13dbc146e06c7482ddeb9cdf7fe50f67e29bca4c02e7157f99f.html | |
| Task parameters: | ClamAV scan: | True |
| Unpack: | True | |
| Share file: | True | |
ClamAV Results
The file matched the following open source and commercial ClamAV rules.
YARA Results
Static Analysis
The following YARA rules matched on the file (static analysis).
| Rule name: | classified |
|---|---|
| Author: | classified |
| Description: | classified |
| TLP : | TLP:GREEN |
| Rule name: | classified |
|---|---|
| Author: | classified |
| Description: | classified |
| TLP : | TLP:GREEN |
| Rule name: | Sus_CMD_Powershell_Usage |
|---|---|
| Author: | XiAnzheng |
| Description: | May Contain(Obfuscated or no) Powershell or CMD Command that can be abused by threat actor(can create FP) |
| TLP: | TLP:WHITE |
| Repository: | YARAify |
Unpacker
The following YARA rules matched on the unpacked file.
Unpacked Files
The following files could be unpacked from this sample.