YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 449b7ec7bde198c0ed8eced5d5cd99a31449a6f96f42e38fa4e8f15726c717e3.

Scan Results

SHA256 hash: 449b7ec7bde198c0ed8eced5d5cd99a31449a6f96f42e38fa4e8f15726c717e3
File size:532'836 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 7434d8252f2043a530b4325dab0c99a6
SHA1 hash: 66584a68f97dfecbe9b3a28e9c3ded65c16f7ae1
SHA3-384 hash: c4ecb0845495aee761230c597c854b71cf966f3be1f698c1bf32fd268d8e8907b6bde9ae61ceb815d5b412ae9cdca9eb
First seen:2026-01-15 15:29:23 UTC
Last seen:Never
Sightings:1
imphash : f2d24d034ad8ae86f9dd9c6c9707e46f
Create hunting rule
ssdeep : 6144:f9GGo2CwtGg6eeihEfph2CMvvqqSaYwpncOeC66AOa0aFtVEQfTo1ozVqMbl:f9fC3hh29Ya77A90aFtDfT5IMbl
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon : 009ac3cfb1810181
Create hunting rule

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:f85318e5-f226-11f0-9df4-42010aa4000b
File name:7434d8252f2043a530b4325dab0c99a6
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Dropper.Darkkomet-6859436-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:SEH__vba
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.