YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 93f8d668ebc9c275de60019ad714afda4b3fbe5767428571f09be91bcdbbc708.

Scan Results

SHA256 hash: 93f8d668ebc9c275de60019ad714afda4b3fbe5767428571f09be91bcdbbc708
File size:2'482'176 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 1f758aab2d109c77bf7347cc27c0f8ef
SHA1 hash: a0e6f7b01cc5d14823019c396a97c75d61f64160
SHA3-384 hash: 9fe1d02b94c6691afe2ab4919569a8e5611abe2a7f41f9e82e8fa416faaa18ae6cc423eb352648d8284cea08d031e718
First seen:2026-06-29 04:46:43 UTC
Last seen:Never
Sightings:1
imphash : ff7ca114f4628ad74d5a63ce1476e717
Create hunting rule
ssdeep : 12288:Wpno2N84IuH/1pauCt++r4XDYxsapoBPg9Gr7BkMPPiWpqDY+I+5X:yntN8tGtLy+24TFr7BHyWEYy
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:86d85316-7375-11f1-ad5e-42010aa4000b
File name:10000000.16e79b30-e745-4ea2-b58d-7d29830010cd.exe
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:DebuggerCheck__API
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:malware_shellcode_hash
Create hunting rule
Author:JPCERT/CC Incident Response Group
Description:detect shellcode api hash value
TLP:TLP:WHITE
Repository:JPCERTCC
Rule name:NET
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:SHA512_Constants
Create hunting rule
Author:phoul (@phoul)
Description:Look for SHA384/SHA512 constants
TLP:TLP:WHITE
Repository:
Rule name:telebot_framework
Create hunting rule
Author:vietdx.mb
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.