YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 6df73c7cfec0616178fae91946f705ae173c2a8848c62643c963659e53fa6202.

Scan Results

SHA256 hash: 6df73c7cfec0616178fae91946f705ae173c2a8848c62643c963659e53fa6202
File size:442'124 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 1d9245212c09140b433feabf05bda0c8
SHA1 hash: d4c5ddda908985045635e9fd297e226d418ee7c0
SHA3-384 hash: 984a9bb7c1c95f48ca6b4a2c02c023bff989637a5918b6344fd89bc92b914e9589b0d1ef599dbe6137dc71e7feaadbd3
First seen:2026-01-19 18:14:32 UTC
Last seen:Never
Sightings:1
imphash : b6ac1566299dfd1e968eb1a5faa7965b
Create hunting rule
ssdeep : 3072:GPtBGRvjxCb5NgX1RQjZ3phRrbyR4jdNqTqHLklZpb4RrRDwRQjZ3phRrbb8R9:6fGKggxphuafcE1xph
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:b40e0b23-f562-11f0-9df4-42010aa4000b
File name:400000.e02d5d22-8955-4fae-aa5a-52e200510519.exe
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Dropper.Tinba-9943147-2
Create hunting rule
Signature:Win.Malware.Cosmu-10013266-0
Create hunting rule
Signature:Win.Malware.Cosmu-10019841-0
Create hunting rule
Signature:Win.Malware.Jaik-10022565-0
Create hunting rule
Signature:Win.Worm.Cosmu-10018412-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:DebuggerCheck__API
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:golang_bin_JCorn_CSC846
Create hunting rule
Author:Justin Cornwell
Description:CSC-846 Golang detection ruleset
TLP:TLP:WHITE
Repository:YARAify
Rule name:INDICATOR_EXE_Packed_MPress
Create hunting rule
Author:ditekSHen
Description:Detects executables built or packed with MPress PE compressor
TLP:TLP:WHITE
Repository:diˈtekSHən
Rule name:TeslaCryptPackedMalware
Create hunting rule
TLP:TLP:WHITE
Repository:MalwareBazaar

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.