YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 8a05958ab9427d872195ce78dfefca2a4b8eef7cb0df2211d881c4b51c3660b9.

Scan Results

SHA256 hash:	8a05958ab9427d872195ce78dfefca2a4b8eef7cb0df2211d881c4b51c3660b9
File size:	655'386 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	46ea9c1a6f044850230f88ac67db5399
SHA1 hash:	41c61558276f9bf2a6b37f97ff74328fd63098f1
SHA3-384 hash:	1a6e2ccc270143c8579077d997dd737609b101132b0323ded43b6420063e379378364b66106bdfd1a1cd56a069775e12
First seen:	2026-03-14 15:31:24 UTC
Last seen:	Never
Sightings:	1
imphash :	dbf687d6aa2a6cafe4349f7b0821a792 Create hunting rule
ssdeep :	12288:1Da3AShoWxZiEyC71VNZAgbi7RFvOPkY/ht0kn:1DAosi2PkG
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	beb2b6b6766676b4 Create hunting rule

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:	dc90e73d-1fba-11f1-b47f-42010aa4000b
File name:	46ea9c1a6f044850230f88ac67db5399
Task parameters:	ClamAV scan:	True
	Unpack:	False
	Share file:	True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:	Win.Malware.Generickdz-9892902-0 Create hunting rule

Signature:	Win.Malware.Mira-6911545-0 Create hunting rule

Signature:	Win.Trojan.Agent-1367215 Create hunting rule

Signature:	Win.Trojan.Agent-1376259 Create hunting rule

Signature:	Win.Trojan.Agent-1376791 Create hunting rule

Signature:	Win.Trojan.Agent-1388655 Create hunting rule

Signature:	Win.Trojan.Agent-1388656 Create hunting rule

Signature:	Win.Trojan.Agent-1388657 Create hunting rule

Signature:	Win.Trojan.Agent-1388658 Create hunting rule

Signature:	Win.Trojan.Agent-1388666 Create hunting rule

Signature:	Win.Trojan.Agent-1388667 Create hunting rule

Signature:	Win.Trojan.Agent-1388668 Create hunting rule

Signature:	Win.Trojan.Agent-1388674 Create hunting rule

Signature:	Win.Trojan.Agent-1388675 Create hunting rule

Signature:	Win.Trojan.Agent-1388685 Create hunting rule

Signature:	Win.Trojan.Agent-1388686 Create hunting rule

Signature:	Win.Trojan.Agent-1388689 Create hunting rule

Signature:	Win.Trojan.Agent-1388690 Create hunting rule

Signature:	Win.Trojan.Agent-1388691 Create hunting rule

Signature:	Win.Trojan.Agent-1388701 Create hunting rule

Signature:	Win.Trojan.Agent-1388702 Create hunting rule

Signature:	Win.Trojan.Agent-1388704 Create hunting rule

Signature:	Win.Trojan.Agent-1388705 Create hunting rule

Signature:	Win.Trojan.Generic-9919081-0 Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:	FreddyBearDropper Create hunting rule
Author:	Dwarozh Hoshiar
Description:	Freddy Bear Dropper is dropping a malware through base63 encoded powershell scrip.
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	golang_bin_JCorn_CSC846 Create hunting rule
Author:	Justin Cornwell
Description:	CSC-846 Golang detection ruleset
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	SUSP_Imphash_Mar23_2 Create hunting rule
Author:	Arnim Rupp (https://github.com/ruppde)
Description:	Detects imphash often found in malware samples (Zero hits with with search for 'imphash:x p:0' on Virustotal)
Reference:	Internal Research
TLP:	TLP:WHITE
Repository:	Neo23x0

Unpacker

The following YARA rules matched on the unpacked file.

Disabled by submitter

Unpacked Files

The following files could be unpacked from this sample.