YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 56afac6b60e76f8290c9843d76e89c87a86d1df525226862119920c640d13f0d.

Scan Results


SHA256 hash: 56afac6b60e76f8290c9843d76e89c87a86d1df525226862119920c640d13f0d
File size:3'768'557 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 63e3341163b8d4ee2f061e37582ad504
SHA1 hash: 24079fe2b2f88aa83105a18ac518f9a0b7aed8a0
SHA3-384 hash: 24f1119f9430bfc4d211e91936a9c670c416440243264b6b17a3e3e6cd621e58e949830ba90b24e26211caeb7b7b82b1
First seen:2022-11-24 19:48:11 UTC
Last seen:Never
Sightings:1
imphash : 2938fb462833e8cdfe1e7de3483b885d
ssdeep : 49152:aYLoVbPlpp4xhyqTA3SJDPLKuNvMYKSmleBhi9:rEttppyI7+DKrtleni
TLSH : T1C906DF39A502493FC03A07745C2FA274A5FC791425BEEB83B3DD5A999AF731474B830A
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks


You can browse the 10 most recent tasks associated with this file blow.

Task Information


Task ID:ed89d574-6c30-11ed-a71a-42010aa4000b
File name:400000.28567086-e26f-4b10-b12c-53192d103c72.exe
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results


The file matched the following open source and commercial ClamAV rules.

Signature:ditekSHen.MALWARE.Win.Ransomware.KillMBR.UNOFFICIAL
Signature:PUA.Win.Packer.Pequake-4
Signature:PUA.Win.Packer.ProtectSharewar-2
Signature:PUA.Win.Packer.ProtectSharewar-3
Signature:Win.Malware.Swisyn-7610494-0
Signature:Win.Malware.Swisyn-9942393-0
Signature:Win.Trojan.VBGeneric-6735885-0
Signature:Win.Virus.Sality-6335700-2
Signature:Win.Virus.Sality-6747602-0

YARA Results


Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:EnigmaStub
Author:@bartblaze
Description:Identifies Enigma packer stub.
TLP:TLP:WHITE
Repository:bartblaze

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files


The following files could be unpacked from this sample.