YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 4f4a084c86c7d53f56bdaa82b0f262762e84bf975fec45cdddcef3fb35b6755d.

SHA256 hash:	4f4a084c86c7d53f56bdaa82b0f262762e84bf975fec45cdddcef3fb35b6755d
File size:	663'552 bytes
File download:	Original
MIME type:	application/octet-stream
MD5 hash:	f4b5ace2882a9c7e2df8d7650795a88b
SHA1 hash:	fa0f365386201b2e58ace675cce077e970c752b9
SHA3-384 hash:	a67175dba0e58c0b8d38f88942a8eaab5736c9d270b2339da7b0c7c869d1d5c2897104fd830cac36c5e1459c37af621e
First seen:	2026-10-30 20:29:45 UTC
Last seen:	Never
Sightings:	1
imphash :	n/a
ssdeep :	6144:l76sW18oKYe7fxvRZ9wOMr65IdMxEEEVWfLxkgf:HdLx39w5hMlE8P
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	FreddyBearDropper Create hunting rule
Author:	Dwarozh Hoshiar
Description:	Freddy Bear Dropper is dropping a malware through base63 encoded powershell scrip.
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	WIN_Sample_Unique_69354b41 Create hunting rule
Author:	Marjoriefort
Description:	Specimen unique (soumission Bazaar) - strings distinctifs propres au sample
Reference:	69354b41e10daf03d3f3af881b32d5c0fec56b1cfe96629fd4c5263413a42854.exe
TLP:	TLP:WHITE
Repository:	YARAify

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-10-30 20:29:46 UTC Static: 3 Unpacker: 0 ClamAV: 0