YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 4f7b4bdcee04f9dc121bdf5ee34410a7d889f3128028ab1ef3ea150d0da0a619.

Scan Results


SHA256 hash: 4f7b4bdcee04f9dc121bdf5ee34410a7d889f3128028ab1ef3ea150d0da0a619
File size:188'416 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 426f7cb7b172b5ad352ede3f34be3088
SHA1 hash: c9a5e70d1c9818ef9b193234990aeb19b28e7cfc
SHA3-384 hash: a2d53ff37503fbe1f170d5fb581e91d574991bcfd7ad09a130eb668d1a6ef6d79f44b40d387f5574eea33012f5f3c28d
First seen:2026-05-19 18:53:04 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 3072:M6OfT0o/DQO7ZN/YCxCP5+xklv0qXcGukrh:M61olVN/IPYxklsqXcGukr
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon : 1003873db9313e16

Tasks


There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information


Task ID:f808eef5-53b3-11f1-badc-42010aa4000b
File name:400000.0c678ffa8e323208639c030ef9b857c0.exe
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results


The file matched the following open source and commercial ClamAV rules.

Signature:Win.Malware.Zusy-6878655-0

YARA Results


Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:SEH__vba
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:telebot_framework
Author:vietdx.mb
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files


The following files could be unpacked from this sample.