YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 7f17dd6b0df39e2a8e46d238889deccb0884df6c739f9377367e1a393675566e.

Scan Results


SHA256 hash: 7f17dd6b0df39e2a8e46d238889deccb0884df6c739f9377367e1a393675566e
File size:12'701'696 bytes
File download: Original
MIME type:application/octet-stream
MD5 hash: 269d3999d9257a8d83542b722a885608
SHA1 hash: e01e6ac6d00419f60c1a575fb3597947df29c43f
SHA3-384 hash: 1cbaa340115b7338651f22ead7873c477d54fc73f9cb715ae305da6586a4dda82f60f2f00b767b3654210d52bd8255dc
First seen:2023-01-25 09:39:24 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 98304:acoictpsxpkem3SzjjWpXVbmu7SvXY/xRuKu:acoiFDzCp4Kl
TLSH : T15CD6A82529FF908AF3B3EE751FCCB9BF8A5AE6A3110D30B6206153164756A41CD8B335
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks


You can browse the 10 most recent tasks associated with this file blow.

Task Information


Task ID:27234346-9c94-11ed-98c2-42010aa4000b
File name:14450000.shc
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results


The file matched the following open source and commercial ClamAV rules.

Signature:SecuriteInfo.com.Generic-EXE.UNOFFICIAL

YARA Results


Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:BitcoinAddress
Author:Didier Stevens (@DidierStevens)
Description:Contains a valid Bitcoin address
TLP:TLP:WHITE
Repository:malware-bazaar
Rule name:SUSP_Double_Base64_Encoded_Executable
Author:Florian Roth
Description:Detects an executable that has been encoded with base64 twice
Reference:https://twitter.com/TweeterCyber/status/1189073238803877889
TLP:TLP:WHITE
Repository:Neo23x0
Rule name:SUSP_Double_Base64_Encoded_Executable_RID34CC
Author:Florian Roth
Description:Detects an executable that has been encoded with base64 twice
Reference:https://twitter.com/TweeterCyber/status/1189073238803877889
TLP:TLP:WHITE

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files


The following files could be unpacked from this sample.