YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 894ec16f892e21ec6fad3526d412eeb7b605a9b8234bec8834aee8d0a2efa250.

Scan Results

SHA256 hash: 894ec16f892e21ec6fad3526d412eeb7b605a9b8234bec8834aee8d0a2efa250
File size:12'800 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: f74308381d3516f5f8528402ac65b942
SHA1 hash: 6844141fa57b8d6761f1b88037cdeca0d409df1a
SHA3-384 hash: 144b3cb89074379291c5cf8e6894fdfd76e7db0718ac5d826de5f2287ffcf4845695bc7f01c6fe30ad2b841989246cdb
First seen:2022-11-24 19:45:37 UTC
Last seen:Never
Sightings:1
imphash : 7c14bc277648f5a23cae2d567279a15d
Create hunting rule
ssdeep : 192:KCvJJHEROF4zoxhawJ2Cbxq7QimIMG/QW13D:NzSzwkCb6FMG/pp
TLSH : T186426D229385095AF2BA03FB14BAA10DD67576212B666AEFB55C31013F7A0C5ED3D343
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:918a40cc-6c30-11ed-a71a-42010aa4000b
File name:400000.bcmzt.exe
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Malware.Upatre-9918897-0
Create hunting rule
Signature:Win.Malware.Upatre-9918901-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:meth_get_eip
Create hunting rule
Author:Willi Ballenthin
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.