YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 7f70951112d9824365909cd54cab2c870f888fac0658021ab13cfc56bb15f7de.

Scan Results

SHA256 hash: 7f70951112d9824365909cd54cab2c870f888fac0658021ab13cfc56bb15f7de
File size:94'563 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: b2d55d6c0a081a0178c09db5afa2dbfa
SHA1 hash: 65c600d3aae054d5515074b2df48f5b75dbccdb2
SHA3-384 hash: a432f00b736f56a96d190aab757f979b797636400e3693212e50b04cef4531f1c60f40ef8bc412e03a5cc9602c974d7a
First seen:2022-11-24 19:52:21 UTC
Last seen:Never
Sightings:1
imphash : 39a971e8d249bce15b73bdd08d22c9fc
Create hunting rule
ssdeep : 1536:eshfSWHHNvoLqNwDDGw9iYeGDmh0HjWOfd74:vhfxHNIdbekm+HiAd
TLSH : T198934C8F74D488FEF8245670146B17718577AA50123A9BCB3B98DD7E993B1268B3C383
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:82750ff7-6c31-11ed-a71a-42010aa4000b
File name:400000.e2d9cc88-d35a-42b3-a08c-a1e1e444d93f.exe
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Malware.Ulise-9951569-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:command_and_control
Create hunting rule
Author:CD_R0M_
Description:This rule searches for common strings found by malware using C2. Based on a sample used by a Ransomware group
TLP:TLP:WHITE
Repository:CD-R0M

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.