YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 4096eb5fec2689c206681d5b003a2765195978dfc6ff5896fd0bc5a7b35e1fd1.

SHA256 hash:	4096eb5fec2689c206681d5b003a2765195978dfc6ff5896fd0bc5a7b35e1fd1
File size:	217'088 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	fccf990bdd281813629360b6990a8fb3
SHA1 hash:	171ab990e6eda9193014c04b35fa591cdb4cc5c5
SHA3-384 hash:	a70e2fb0b1fba742fa42ef5ae1b54b386c9a00d4651018c04547ecb5413c1ed9484d096b2c9f4cb9745b3c87d0af5389
First seen:	2025-11-21 02:44:37 UTC
Last seen:	Never
Sightings:	1
imphash :	3f8d79e42b0b7cecf379b1ddce4e422a Create hunting rule
ssdeep :	768:sDApAJmxwUh6zO5g7Wfb8BvTRbdUE6Sijv7xCINogjX/1H5eXdnhg20a0kXdnhAo:esASwKScoNSLDhOM9KH1juDU
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

Signature:	PUA.Win.Packer.Lccwin-2 Create hunting rule

Signature:	SecuriteInfo.com.BackDoor.HangUp.43791.UNOFFICIAL Create hunting rule

Signature:	SecuriteInfo.com.BackDoor.HangUp.43914.UNOFFICIAL Create hunting rule

Signature:	SecuriteInfo.com.BackDoor.IRC.Tdongs.13538.21428.UNOFFICIAL Create hunting rule

Signature:	Win.Malware.Qukart-6838239-0 Create hunting rule

Signature:	Win.Trojan.Berbew-9994138-0 Create hunting rule

Signature:	Win.Trojan.Obfus-38 Create hunting rule

Signature:	Win.Trojan.Padodor-10016488-0 Create hunting rule

Signature:	Win.Trojan.Qukart-6874817-0 Create hunting rule

The following YARA rules matched on the file (static analysis).

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2025-11-21 02:44:37 UTC Static: 1 Unpacker: 0 ClamAV: 9