YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 61e524d3fc4b2618ba74c426914777611c3741d8ec31bbd2323b49b92ea7e5e4.

Scan Results


SHA256 hash: 61e524d3fc4b2618ba74c426914777611c3741d8ec31bbd2323b49b92ea7e5e4
File size:427'455 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: fddcc12111f2db5822685c7443f559c0
SHA1 hash: 42ac40e33ef7e455a1680e9b6dc0fa7aeefa0ce1
SHA3-384 hash: 5a1cd4867be1d1b9113c61832600f576d40ff6973f68c66675dc83f87c319f0d99ebf269fd9bf88c11b199047d23eb43
First seen:2022-11-24 19:41:35 UTC
Last seen:Never
Sightings:1
imphash : 20fd61c238faa51d4f1bd996faf3450b
ssdeep : 6144:wlfj4dhMo4GEeBVRot846iQ/5Dc6gvnOve/eysVA8rPXd:wlfsdhMo4BLdQ9c6gvOvemvVA2PXd
TLSH : T14094B8137221D891E15557FAA3BA43387AB8876028F0CD23FFE4DCB2AC75561971EA0D
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks


You can browse the 10 most recent tasks associated with this file blow.

Task Information


Task ID:01573a6a-6c30-11ed-a71a-42010aa4000b
File name:400000.b4b24154-76de-44e6-9316-1f848956ff31.exe
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results


The file matched the following open source and commercial ClamAV rules.

Signature:Win.Adware.Razy-9853577-0
Signature:Win.Malware.Razy-6783523-0
Signature:Win.Malware.Zusy-9953448-0
Signature:Win.Packed.Zusy-9951424-0

YARA Results


Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:adonunix2
Author:Tim Brown @timb_machine
Description:AD on UNIX
TLP:TLP:WHITE
Repository:malware-bazaar
Rule name:meth_get_eip
Author:Willi Ballenthin
TLP:TLP:WHITE
Repository:yaraify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files


The following files could be unpacked from this sample.