YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 9e63ac57436830c3fc28a049a74330e8c8f739f24276767af013aa4c4f544f8d.

Scan Results

SHA256 hash: 9e63ac57436830c3fc28a049a74330e8c8f739f24276767af013aa4c4f544f8d
File size:317'035 bytes
File download: Original
MIME type:text/html
MD5 hash: af44ba88ce0f355fa0046d8bdd6e5aee
SHA1 hash: a57acbba7fb1689c3aa6d0b6875b1169af42b46e
SHA3-384 hash: e65a01d0e8a4b9a7efbab7b8f3cf48042e0b8930aa8490325f6bde1d6be7638b1d47a4578b888a49964fe8877ea77f50
First seen:2025-11-21 02:53:40 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 6144:SlKgwFOr5cDOKSHOBB+0dLzhRziANVZYvBD2WMJzY3vYWFOnIrUmLGu7G8mLk:AKTNzTTlbnilLak
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:48bb65b0-c685-11f0-adeb-42010aa4000b
File name:API_$67,988 .shtml
Task parameters:ClamAV scan:True
Unpack:False
Share file:False

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:PUA.Win.Trojan.Xored-1
Create hunting rule
Signature:Sanesecurity.Malware.31840.UNOFFICIAL
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:Sus_CMD_Powershell_Usage
Create hunting rule
Author:XiAnzheng
Description:May Contain(Obfuscated or no) Powershell or CMD Command that can be abused by threat actor(can create FP)
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.