YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 5c58f878f28cd78e59c235c1dbc058b2b285dc2e92839c8a3d2977df90896f41.

SHA256 hash:	5c58f878f28cd78e59c235c1dbc058b2b285dc2e92839c8a3d2977df90896f41
File size:	101'896'192 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	b944f9b7e5405ddc114057598d8b8a85
SHA1 hash:	6ff8db675bcdb71139c2557654c4a0c6ad14edd6
SHA3-384 hash:	3df779a40289b086d96629fb10f485cc70b8419092613651df3676542fa3bd606112b3e32390d19f2536cf5dd7a8fe68
First seen:	2026-07-19 11:16:43 UTC
Last seen:	Never
Sightings:	1
imphash :	b04df30c44974b774a29da00f304909d Create hunting rule
ssdeep :	1572864:yAHH9X85QhiTI/o7i40PWTNx7417VqrDCv1R24NoFTTMUbgtKU5ijMnoknn+D253:fHt85OiZ407LDCv1E46F3MUbeN5N2U
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	DebuggerCheck__API Create hunting rule
Reference:	https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:	TLP:WHITE

Rule name:	golang_bin_JCorn_CSC846 Create hunting rule
Author:	Justin Cornwell
Description:	CSC-846 Golang detection ruleset
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	TH_AntiVM_MassHunt_Win_Malware_2026_CYFARE Create hunting rule
Author:	CYFARE
Description:	Detects Windows malware employing anti-VM / anti-sandbox evasion techniques across VMware, VirtualBox, Hyper-V, QEMU, Xen, and generic sandbox environments
Reference:	https://cyfare.net/
TLP:	TLP:WHITE
Repository:	YARAify

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-07-19 11:16:44 UTC Static: 3 Unpacker: 0 ClamAV: 0