YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 6a6e6f524234a98274524587f65064b7b9ccf7cfa39851e5499728233de06bbe.

Scan Results

SHA256 hash: 6a6e6f524234a98274524587f65064b7b9ccf7cfa39851e5499728233de06bbe
File size:2'131'853 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 07b6f858e4da23e8f9f44f3a3d931733
SHA1 hash: 76fef54ad569dec782a0d054c5fc8dd062b98333
SHA3-384 hash: 47a89f680c0e938c60b762c53c68494ff8f879b9f319a7007a33ecc523fdf04d6ebed6a7390ce053428b67e671df330f
First seen:2026-03-22 19:20:31 UTC
Last seen:Never
Sightings:1
imphash : 1ec127ea761dfdd549d649168a21dc6a
Create hunting rule
ssdeep : 24576:/rRoNk7BZpAHF8z3j5D7JaT+KVvrSrtUxPQRlISI8LUlFl5Fp+:/rRokpAHF+3j5D78OBUF4AcY/+
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon : d69292b2ca8ca49b
Create hunting rule

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:31489d27-2624-11f1-b47f-42010aa4000b
File name:07b6f858e4da23e8f9f44f3a3d931733
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:SecuriteInfo.com.Trojan.GenericKD.35061526.11338.16144.UNOFFICIAL
Create hunting rule
Signature:SecuriteInfo.com.Trojan.GenericKD.36051471.21356.3931.UNOFFICIAL
Create hunting rule
Signature:SecuriteInfo.com.Win32.Malware-gen.11184344.UNOFFICIAL
Create hunting rule
Signature:Win.Trojan.Generic-9950561-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:DebuggerCheck__API
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:golang_bin_JCorn_CSC846
Create hunting rule
Author:Justin Cornwell
Description:CSC-846 Golang detection ruleset
TLP:TLP:WHITE
Repository:YARAify
Rule name:PE_Digital_Certificate
Create hunting rule
Author:albertzsigovits
TLP:TLP:WHITE
Repository:
Rule name:TH_AntiVM_MassHunt_Win_Malware_2026_CYFARE
Create hunting rule
Author:CYFARE
Description:Detects Windows malware employing anti-VM / anti-sandbox evasion techniques across VMware, VirtualBox, Hyper-V, QEMU, Xen, and generic sandbox environments
Reference:https://cyfare.net/
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.