YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash a04472a333c7cdb08aa4ccd43ddfce4a07de1cc39338c912040a54691685abb7.

SHA256 hash:	a04472a333c7cdb08aa4ccd43ddfce4a07de1cc39338c912040a54691685abb7
File size:	184'320 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	ae8cc2961971d1c9a72494560bcd43fa
SHA1 hash:	6da5c4666918f2be49f7fcd7ea1626030322c1dc
SHA3-384 hash:	37db5fd61f8979f6af2f21ab43ffb13cd48bc83849d9b3a7f5df9eb1f39999ee4bf662ffb99e1d5490cd6510df0cdcf1
First seen:	2026-10-09 22:57:42 UTC
Last seen:	Never
Sightings:	1
imphash :	n/a
ssdeep :	3072:isdh8kZbsOb0Mt4zorTzLxhkznfkp99mNoqCOpChdRw1tZtyJ4TAuZMg0IYZ1d:isdhBZbsm0hizLxh68p9YOqLpChdRw14
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	DebuggerCheck__API Create hunting rule
Reference:	https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:	TLP:WHITE

Rule name:	golang_bin_JCorn_CSC846 Create hunting rule
Author:	Justin Cornwell
Description:	CSC-846 Golang detection ruleset
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	UPX Create hunting rule
Author:	kevoreilly
Description:	UPX Unpacker: dump on OEP (original entry point)
TLP:	TLP:WHITE
Repository:	CAPE

Rule name:	VECT_Ransomware Create hunting rule
Author:	Mustafa Bakhit
Description:	Detects activity associated with VECT ransomware. This includes registry modifications and deletions, execution of system and defense-evasion commands, suspicious API usage, mutex creation, file and memory manipulation, ransomware note generation, anti-debugging and anti-analysis techniques, and embedded cryptographic constants (SHA256) characteristic of this malware family. Designed for threat intelligence and malware detection environments.
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	WIN_Malware_Unknown_ForgeAuto_5001c94c Create hunting rule
Author:	Marjoriefort
Description:	Detects Unknown (pe, etat binaire)
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	WIN_Sample_Unique_69354b41 Create hunting rule
Author:	Marjoriefort
Description:	Specimen unique (soumission Bazaar) - strings distinctifs propres au sample
Reference:	69354b41e10daf03d3f3af881b32d5c0fec56b1cfe96629fd4c5263413a42854.exe
TLP:	TLP:WHITE
Repository:	YARAify

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-10-09 22:57:42 UTC Static: 7 Unpacker: 0 ClamAV: 0