YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 4a22baa7bca240ca9772d0752e64b3f880443719d2594687bfc144d2d6074713.

Scan Results

SHA256 hash: 4a22baa7bca240ca9772d0752e64b3f880443719d2594687bfc144d2d6074713
File size:3'456'776 bytes
File download: Original Unpacked
MIME type:application/x-dosexec
MD5 hash: 15d28b6e8cccdc854f89df5b1848cbb6
SHA1 hash: 5a010ef3291ee22a36f6a77860f3c2270e9a0ea9
SHA3-384 hash: ae34a25c6f35cce111f4d2366c4341843b6a41c148f39e03519e51684018b1e6e92853a431e66dd7a5ae3cc70195371e
First seen:2026-03-25 16:21:59 UTC
Last seen:Never
Sightings:1
imphash : d50a56fe2fe20efe02049287d3cb46cc
Create hunting rule
ssdeep : 24576:X8uB4/izRXTOkMtrIceMaFPjkjD29JDt3YZ3y75:LBakOElMaFLkcDtoZ
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:bff3f464-2866-11f1-b47f-42010aa4000b
File name:15d28b6e8cccdc854f89df5b1848cbb6
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Dropper.Sykipot-9934979-0
Create hunting rule
Signature:Win.Malware.Bulz-9859378-0
Create hunting rule
Signature:Win.Malware.Bulz-9885962-0
Create hunting rule
Signature:Win.Malware.Dqan-9885829-0
Create hunting rule
Signature:Win.Malware.Dqan-9933069-0
Create hunting rule
Signature:Win.Malware.Generic-9870238-0
Create hunting rule
Signature:Win.Malware.Generic-9932658-0
Create hunting rule
Signature:Win.Packed.Generic-7602836-0
Create hunting rule
Signature:Win.Packed.Pidgeon-9909600-0
Create hunting rule
Signature:Win.Trojan.Emotet-9869836-0
Create hunting rule
Signature:Win.Trojan.Generic-9918388-0
Create hunting rule
Signature:Win.Trojan.Generic-9919133-0
Create hunting rule
Signature:Win.Trojan.Generic-9939768-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:DebuggerCheck__API
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:golang_bin_JCorn_CSC846
Create hunting rule
Author:Justin Cornwell
Description:CSC-846 Golang detection ruleset
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.