🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 4a68d3e2051d28787eed8ee0c2ca770cf86fd71cb5c8221d2b33764607818f3c.

Scan Results


SHA256 hash: 4a68d3e2051d28787eed8ee0c2ca770cf86fd71cb5c8221d2b33764607818f3c
File size:13'371 bytes
File download: Original
MIME type:text/html
MD5 hash: 7fa2ff7b10d933ca61791656a8c53abc
SHA1 hash: bba81b4057ccb176020afd6191a862066f6d0623
SHA3-384 hash: 11020890807720b7d14e30fd37e32cc04368a33961890d8526c030ab654c711f079c4a40dc28821c2dff1b0bb13dd29a
First seen:2026-08-10 06:44:22 UTC
Last seen:2026-08-10 12:58:35 UTC
Sightings:2
imphash :n/a
ssdeep : 192:FoDLpLSe4iqsr5qdeN2Gz7m9U02wigyKsTzUzaz0zXEXvUtVoTPfXXLGPA7yICM:GDHqs/Dbwigy7TzUhYfUtVojfH6PA7iM
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks


There are 2 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information


Task ID:32b72e15-94bb-11f1-bf07-42010aa4000b
File name:API_ORDER PO2026-MKT.shtml
Task parameters:ClamAV scan:True
Unpack:False
Share file:False

ClamAV Results


The file matched the following open source and commercial ClamAV rules.

YARA Results


Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:ach_202408_html_TelegramBot
Author:abuse.ch
Description:Detects potential JavaScript Telegram Bot inside HTML code
TLP:TLP:WHITE
Repository:YARAify
Rule name:classified
Author:classified
Description:classified
TLP :TLP:AMBER
Rule name:classified
Author:classified
Description:classified
Rule name:classified
Author:classified
Rule name:telebot_framework
Author:vietdx.mb
TLP:TLP:WHITE
Repository:YARAify
Rule name:telegram_bot_api
Author:rectifyq
Description:Detects file containing Telegram Bot API
TLP:TLP:WHITE
Repository:YARAify
Rule name:classified
Author:classified

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files


The following files could be unpacked from this sample.

Task Information


Task ID:ebd032c0-9486-11f1-bf07-42010aa4000b
File name:API_ORDER PO2026-MKT.shtml
Task parameters:ClamAV scan:True
Unpack:False
Share file:False

ClamAV Results


The file matched the following open source and commercial ClamAV rules.

YARA Results


Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:ach_202408_html_TelegramBot
Author:abuse.ch
Description:Detects potential JavaScript Telegram Bot inside HTML code
TLP:TLP:WHITE
Repository:YARAify
Rule name:classified
Author:classified
Description:classified
TLP :TLP:AMBER
Rule name:classified
Author:classified
Description:classified
Rule name:classified
Author:classified
Rule name:telebot_framework
Author:vietdx.mb
TLP:TLP:WHITE
Repository:YARAify
Rule name:telegram_bot_api
Author:rectifyq
Description:Detects file containing Telegram Bot API
TLP:TLP:WHITE
Repository:YARAify
Rule name:classified
Author:classified

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files


The following files could be unpacked from this sample.