YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 9445f944646ec18a4ac4cffdf009f6521ad03c5fe121634e2150f424988f0eae.

SHA256 hash:	9445f944646ec18a4ac4cffdf009f6521ad03c5fe121634e2150f424988f0eae
File size:	478'888 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	22e85a094809a2e07771391564b183d0
SHA1 hash:	bf0a4f2e940af1d1d6d90293428da2e59dd719e6
SHA3-384 hash:	bdf693bf9059d44620041a0ddaff235e78290b826605c16cc03bb869780319983448cf13e4b5dbd387d39edcfd62aa09
First seen:	2022-11-24 19:40:31 UTC
Last seen:	Never
Sightings:	1
imphash :	477aa2deaa0c765ec0ee08b1bb80e82d Create hunting rule
ssdeep :	6144:H0Yg4JNQ7eJQr8GQE6pbq7mNuBY2hOoqybu+v3tA4rJzByIa4EKII5EGr+cS/:HG5r8JE6SW2O4u+PXrJzBIklN
TLSH :	T11BA49DA6F694843BC2631E384C6FA57A68367F0227304E4B7FE46D0D2F397913916297 Create hunting rule
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	command_and_control Create hunting rule
Author:	CD_R0M_
Description:	This rule searches for common strings found by malware using C2. Based on a sample used by a Ransomware group
TLP:	TLP:WHITE
Repository:	CD-R0M

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2022-11-24 19:40:31 UTC Static: 1 Unpacker: 0 ClamAV: 0