YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 521779e90692b7e65dbc8ee0e18931449aea8b9010c8bd5d4128c655dd3bbf87.

SHA256 hash:	521779e90692b7e65dbc8ee0e18931449aea8b9010c8bd5d4128c655dd3bbf87
File size:	9'216 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	b1a477da30c5349522afb285f1cadeda
SHA1 hash:	e5086ff227c04cfa4784bff60ea6ba5944caa49f
SHA3-384 hash:	6c213b978917f5da4b1bb469d19cc205f46d7a91cf5bf2809e3f2c7825906b42dd05751e98685a6b569983fb2e0bb80d
First seen:	2026-10-10 10:24:56 UTC
Last seen:	Never
Sightings:	1
imphash :	8050b2e584986815c5aa192bf3f5809f Create hunting rule
ssdeep :	96:q7Gkm36bnWi2QzUoiEth+S+5wuISmACIcvFzfyKNffQSWqjcNcnQh:uGkm36bWilzUoiEte5VCRvN9QS9jIL
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	VECT_Ransomware Create hunting rule
Author:	Mustafa Bakhit
Description:	Detects activity associated with VECT ransomware. This includes registry modifications and deletions, execution of system and defense-evasion commands, suspicious API usage, mutex creation, file and memory manipulation, ransomware note generation, anti-debugging and anti-analysis techniques, and embedded cryptographic constants (SHA256) characteristic of this malware family. Designed for threat intelligence and malware detection environments.
TLP:	TLP:WHITE
Repository:	YARAify

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-10-10 10:24:56 UTC Static: 1 Unpacker: 0 ClamAV: 0