YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 3ebe6091fb4c25cb52ca82fc6897f73b496f8de15105353ab22760098a93c8b8.

Scan Results

SHA256 hash: 3ebe6091fb4c25cb52ca82fc6897f73b496f8de15105353ab22760098a93c8b8
File size:2'167'808 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 22df6edfe15dfe755efd70da95da8978
SHA1 hash: 8fee8e8a971ca2ad5973a6b025d33c1d1103d9ac
SHA3-384 hash: dfd6de72f068ce9e52e570ce96ab5dfd6b6a9ca1065178780b33d6dc0342fa76fb2816fd116873e0c9ee5cc6556d22bf
First seen:2026-03-29 17:29:52 UTC
Last seen:Never
Sightings:1
imphash : f34d5f2d4577ed6d9ceec516c1f5a744
Create hunting rule
ssdeep : 49152:aDZ4gNbPONpyfi7qO2Q+zQdlUmW4kbcWTCpQI:aTf8qNQ+zKRWrbhC
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon : f0aa9a336969e0f0
Create hunting rule

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:e5198491-2b94-11f1-b47f-42010aa4000b
File name:22df6edfe15dfe755efd70da95da8978
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:CP_Script_Inject_Detector
Create hunting rule
Author:DiegoAnalytics
Description:Detects attempts to inject code into another process across PE, ELF, Mach-O binaries
TLP:TLP:WHITE
Repository:YARAify
Rule name:Indicator_MiniDumpWriteDump
Create hunting rule
Author:Obscurity Labs LLC
Description:Detects PE files and PowerShell scripts that use MiniDumpWriteDump either through direct imports or string references
TLP:TLP:WHITE
Rule name:NET
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:pe_imphash
Create hunting rule
TLP:TLP:WHITE
Repository:MalwareBazaar
Rule name:Skystars_Malware_Imphash
Create hunting rule
Author:Skystars LightDefender
Description:imphash
TLP:TLP:WHITE
Repository:MalwareBazaar
Rule name:telebot_framework
Create hunting rule
Author:vietdx.mb
TLP:TLP:WHITE
Repository:YARAify
Rule name:classified
Author:classified
Description:classified
TLP :TLP:AMBER

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.