YARAify Scan Results
You are viewing the YARAify database entry for the file with the SHA256 hash 8313aae32d6c2d01a3026d6eff338bc1999fd4a95dfed1d604655060203f6f01.
Scan Results
| SHA256 hash: | 8313aae32d6c2d01a3026d6eff338bc1999fd4a95dfed1d604655060203f6f01 | |
|---|---|---|
| File size: | 372'736 bytes | |
| File download: | Original | |
| MIME type: | application/x-dosexec | |
| MD5 hash: | 974233e25fa182001d021d8862f60396 | |
| SHA1 hash: | f3ada1ea3ab92e3486cee7c93f752a11688b595c | |
| SHA3-384 hash: | f0fedf8a50ede74ac89157bedb704b72cc25af8b74d0265a91bbbdc55dc17fe964377207eb5a54ec374d978e6eaa75cf | |
| First seen: | 2026-01-10 08:35:20 UTC | |
| Last seen: | Never | |
| Sightings: | 1 | |
| imphash : | a3df475500e5e30f4680b397c2ee13f1 | |
| ssdeep : | 3072:tVMfMIbI3wFwnYQK8Bp7+WOls+BC3K5eqU+BC3K5eqYroG:IfMmFQlBp7jDK70K7 | |
| TLSH : | n/a | |
| telfhash : | n/a | |
| gimphash : | n/a | |
| dhash icon : | 69ccd4d49696cc71 | |
Tasks
There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.
Task Information
| Task ID: | 4c713401-edff-11f0-9df4-42010aa4000b | |
|---|---|---|
| File name: | 41a0000.5b7cea34-cb9f-4307-9b41-5ef504c02503.exe | |
| Task parameters: | ClamAV scan: | True |
| Unpack: | False | |
| Share file: | True | |
ClamAV Results
The file matched the following open source and commercial ClamAV rules.
| Signature: | Win.Malware.Gepys-10026549-0 |
|---|
| Signature: | Win.Malware.Gepys-9770177-0 |
|---|
| Signature: | Win.Trojan.Agent-1291880 |
|---|
YARA Results
Static Analysis
The following YARA rules matched on the file (static analysis).
| Rule name: | DebuggerCheck__API |
|---|---|
| Reference: | https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara |
| TLP: | TLP:WHITE |
| Rule name: | golang_bin_JCorn_CSC846 |
|---|---|
| Author: | Justin Cornwell |
| Description: | CSC-846 Golang detection ruleset |
| TLP: | TLP:WHITE |
| Repository: | YARAify |
Unpacker
The following YARA rules matched on the unpacked file.
Disabled by submitter
Unpacked Files
The following files could be unpacked from this sample.
Disabled by submitter