YARAify Scan Results
You are viewing the YARAify database entry for the file with the SHA256 hash 80e25df31d75f883618cd77ef0881406dce057d35620f1c84470a5fcde3cdf49.
Scan Results
| SHA256 hash: | 80e25df31d75f883618cd77ef0881406dce057d35620f1c84470a5fcde3cdf49 | |
|---|---|---|
| File size: | 19'499 bytes | |
| File download: | Original | |
| MIME type: | text/x-shellscript | |
| MD5 hash: | 3243f7bf3ad3c1dc708f4c06c1b36f1c | |
| SHA1 hash: | 6545b3c4366d480701b8278e47a04f85933da24b | |
| SHA3-384 hash: | d5df7ce704b3a44ca628ea88737b8975fc96e0fe9ad2ac3bab9c42e67961fd0356cb7fbc12f7ca7c4ed857851e315b14 | |
| First seen: | 2026-03-11 15:32:25 UTC | |
| Last seen: | Never | |
| Sightings: | 1 | |
| imphash : | n/a | |
| ssdeep : | 384:KFcuQpWx+BL0SWL0gLzsO9a4cbddrME8jyfzsO9a4cbddrME8jy4:KF8i+BL0SI0MzsP4cbddr7zsP4cbddrk | |
| TLSH : | n/a | |
| telfhash : | n/a | |
| gimphash : | n/a | |
| dhash icon : | n/a | |
Tasks
There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.
Task Information
| Task ID: | 81b38a7a-1d5f-11f1-b47f-42010aa4000b | |
|---|---|---|
| File name: | 80e25df31d75f883618cd77ef0881406dce057d35620f1c84470a5fcde3cdf49.sh | |
| Task parameters: | ClamAV scan: | True |
| Unpack: | False | |
| Share file: | True | |
ClamAV Results
The file matched the following open source and commercial ClamAV rules.
No matches
YARA Results
Static Analysis
The following YARA rules matched on the file (static analysis).
| Rule name: | SUSP_LNX_Base64_Exec_Apr24 |
|---|---|
| Author: | Christian Burkard |
| Description: | Detects suspicious base64 encoded shell commands (as seen in Palo Alto CVE-2024-3400 exploitation) |
| Reference: | Internal Research |
| TLP: | TLP:WHITE |
Unpacker
The following YARA rules matched on the unpacked file.
Disabled by submitter
Unpacked Files
The following files could be unpacked from this sample.
Disabled by submitter