YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 53804af496bf14fc376601317a2df3418fd90bec5fdbc8801da0a034ef0fa108.

Scan Results

SHA256 hash: 53804af496bf14fc376601317a2df3418fd90bec5fdbc8801da0a034ef0fa108
File size:52'555'776 bytes
File download: Original
MIME type:application/octet-stream
MD5 hash: 86b30bc5850ae4adbebfe650a506d578
SHA1 hash: b743477e913514d90f538d9c70bde89e6b02577d
SHA3-384 hash: a733c13945719d97a0718db00b7f954e1e21f90b85e1c8ac6806ed3ea85e37e17d4b908be6366c3b47c04fd24396b521
First seen:2025-11-20 11:48:34 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 786432:AiJp+Htg5FjMrez+ifSyE8jwN1neWBxu5289wI1p2IYmEoD1hQn/Ki5ny0:Jp+NSyezVEy2eWBxuhwIk7oxwSi5y0
TLSH : T12AB7333091981AE9D29FC6FB4DC0BBDDCB327014F2B8855943B68CA849846D9B43F75B
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:d8a16e53-c606-11f0-adeb-42010aa4000b
File name:61f0000.shc
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:Formbook
Create hunting rule
Author:kevoreilly
Description:Formbook Payload
TLP:TLP:WHITE
Repository:CAPE
Rule name:maldoc_getEIP_method_1
Create hunting rule
Author:Didier Stevens (https://DidierStevens.com)
TLP:TLP:WHITE
Repository:
Rule name:meth_get_eip
Create hunting rule
Author:Willi Ballenthin
TLP:TLP:WHITE
Repository:YARAify
Rule name:meth_stackstrings
Create hunting rule
Author:Willi Ballenthin
TLP:TLP:WHITE
Repository:YARAify
Rule name:RIPEMD160_Constants
Create hunting rule
Author:phoul (@phoul)
Description:Look for RIPEMD-160 constants
TLP:TLP:WHITE
Repository:
Rule name:SHA1_Constants
Create hunting rule
Author:phoul (@phoul)
Description:Look for SHA1 constants
TLP:TLP:WHITE
Repository:

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.