YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 98ac70038b518b98dfb9925ad31ffd95f466b5036926a3fd3288d28698531048.

Scan Results

SHA256 hash: 98ac70038b518b98dfb9925ad31ffd95f466b5036926a3fd3288d28698531048
File size:484'529 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 92c96a5170a3d5562b1e28edc7e85866
SHA1 hash: 1284bd7f4eedcc9713186f65ddc8bc3bf78d69e1
SHA3-384 hash: 98a1b89191b4c4d9f68daccbabfb6e6c233059fb072cc4d6b5ad84552f905826743cecb213c4e0899a9abcc2d7c78838
First seen:2022-11-24 19:52:24 UTC
Last seen:Never
Sightings:1
imphash : 63ecf1fe5b1b7f5242123c19b64fe779
Create hunting rule
ssdeep : 6144:uaUGq9Ep8tpFM9/kiTM9WTlaaPcIp2qy/u7B2+/Qf7TOaN05gDHnN3t85cSjn:uBEUHM9siTtpRpWu7kV3OUNH
TLSH : T16AA47C15B690813BC2931B746C3F6662B679BFD92A3499477BEC2D0D1F356803A072E3
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:844e05d7-6c31-11ed-a71a-42010aa4000b
File name:5280000.tfh36C4.tmp
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:command_and_control
Create hunting rule
Author:CD_R0M_
Description:This rule searches for common strings found by malware using C2. Based on a sample used by a Ransomware group
TLP:TLP:WHITE
Repository:CD-R0M

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.