YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash a093edf6f92ea85ba5fd2b0ece26c0850b95ac557704db7c1f885941d4f10f81.

Scan Results


SHA256 hash: a093edf6f92ea85ba5fd2b0ece26c0850b95ac557704db7c1f885941d4f10f81
File size:806'912 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: e54e97ac94578100398355d60edfa02f
SHA1 hash: 49328ed17b1ad4a76db068d7919941fa39853f18
SHA3-384 hash: 748db2be43924a5f00e2ca7c59756fbf93d4034651598d4ddd2dcc613a2b16d505f6f43ea81b6ebca329a662d9e85cec
First seen:2022-11-24 19:55:07 UTC
Last seen:Never
Sightings:1
imphash : d98d774b323613bb6ef2948782d33b86
ssdeep : 12288:2drOCVZuwm+hAZmpNQAFNTyu7qPSERLzLM6vsa6l3h5W:0rOEJAZmAgNTd7qPSElXM6vsaq
TLSH : T10D054C2E72F463A7D5769138CA85855BF5BDB46F236043CB02D406E92B2F9E52B3E304
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks


You can browse the 10 most recent tasks associated with this file blow.

Task Information


Task ID:e57f8439-6c31-11ed-a71a-42010aa4000b
File name:7ffb411a0000.oleaut32.dll
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results


The file matched the following open source and commercial ClamAV rules.

YARA Results


Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:cobalt_strike_tmp01925d3f
Author:The DFIR Report
Description:files - file ~tmp01925d3f.exe
Reference:https://thedfirreport.com
TLP:TLP:WHITE
Repository:yaraify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files


The following files could be unpacked from this sample.