YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 7a8a26b4ebe0793bed6677f05122f3b7a58058957b08b49900bb4ce9cdcd018c.

Scan Results

SHA256 hash: 7a8a26b4ebe0793bed6677f05122f3b7a58058957b08b49900bb4ce9cdcd018c
File size:101'905 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: b0fec4c1d5c2a425be5892efe66eae2e
SHA1 hash: 411f17f357e6b447bc5cfa50f62c943204f30cb0
SHA3-384 hash: aeafc9adae415d522c44119fe8c8ba0abb6599f0225b8f53f154759ec68163814791499d41d83625a82758d871796b05
First seen:2022-11-24 19:53:49 UTC
Last seen:Never
Sightings:1
imphash : 353386ece06d470c958655cb7a7e2bc2
Create hunting rule
ssdeep : 1536:+QAreYjXl+NdsEJ+P7qQoRhWyoVp+tKBDFrLrlrD:bArbj6sEJWCHcA6rLrlrD
TLSH : T17FA32817FBE30B95E25C9B3112F986A0876378294E07960F31B46F3A3C72D625DA6707
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:b6b187ce-6c31-11ed-a71a-42010aa4000b
File name:400000.9b2a009f-de28-4930-b5ff-f8bc5f518390.exe
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:command_and_control
Create hunting rule
Author:CD_R0M_
Description:This rule searches for common strings found by malware using C2. Based on a sample used by a Ransomware group
TLP:TLP:WHITE
Repository:CD-R0M

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.