YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 7a7a244bcf89e126bcd8b36b8a8d7cf7acf852c1c6b79768460e43e6e29d4a87.

SHA256 hash:	7a7a244bcf89e126bcd8b36b8a8d7cf7acf852c1c6b79768460e43e6e29d4a87
File size:	516'096 bytes
File download:	Original
MIME type:	application/octet-stream
MD5 hash:	2818029b3398f01fb480f3af78da45e0
SHA1 hash:	792a4c39389852718940577c8765d7f972c7b3e1
SHA3-384 hash:	f7d9adff256594d6b0f4ce86d195deb85361f9f88521d0b96cc0dd2874b4c82a3ed745e7ddb905fe5a01d7455b97f743
First seen:	2026-09-09 02:34:24 UTC
Last seen:	Never
Sightings:	1
imphash :	n/a
ssdeep :	12288:XLV6BtpmkgGLUcQsEEj4MS1mLV6BtpmkgGLUcQsEEj4A:bApfgGwcbM0ApfgGwcb
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	ach_NanoCore Create hunting rule
Author:	abuse.ch
TLP:	TLP:WHITE
Repository:	Sandnet

Rule name:	DebuggerCheck__API Create hunting rule
Reference:	https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:	TLP:WHITE

Rule name:	malware_Nanocore_strings Create hunting rule
Author:	JPCERT/CC Incident Response Group
Description:	detect Nanocore in memory
Reference:	internal research
TLP:	TLP:WHITE
Repository:	JPCERTCC

Rule name:	Nanocore Create hunting rule
Author:	JPCERT/CC Incident Response Group
Description:	detect Nanocore in memory
Reference:	internal research
TLP:	TLP:WHITE
Repository:	JPCERTCC

Rule name:	nanocore_rat Create hunting rule
Author:	jeFF0Falltrades
TLP:	TLP:WHITE
Repository:	jeFF0Falltrades

Rule name:	Nanocore_RAT_Gen_2 Create hunting rule
Author:	Florian Roth (Nextron Systems)
Description:	Detetcs the Nanocore RAT
Reference:	https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
TLP:	TLP:WHITE
Repository:	Neo23x0

Rule name:	Nanocore_RAT_Gen_2_RID2D96 Create hunting rule
Author:	Florian Roth
Description:	Detetcs the Nanocore RAT
Reference:	https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
TLP:	TLP:WHITE

Rule name:	NETexecutableMicrosoft Create hunting rule
Author:	malware-lu
TLP:	TLP:WHITE
Repository:

Rule name:	UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser Create hunting rule
Author:	malware-lu
TLP:	TLP:WHITE
Repository:

Rule name:	UPXv20MarkusLaszloReiser Create hunting rule
Author:	malware-lu
TLP:	TLP:WHITE
Repository:

Rule name:	win_nanocore_w0 Create hunting rule
Author:	Kevin Breen <kevin@techanarchy.net>
TLP:	TLP:WHITE
Repository:	Malpedia

Rule name:	Windows_Trojan_Nanocore_d8c4e3c5 Create hunting rule
Author:	Elastic Security
TLP:	TLP:WHITE
Repository:	elastic

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-09-09 02:34:24 UTC Static: 13 Unpacker: 0 ClamAV: 0