YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash a28cdd72a596c9214fbe840489250b947c70779a28427539825cd5f9e6ab6c1c.

Scan Results

SHA256 hash: a28cdd72a596c9214fbe840489250b947c70779a28427539825cd5f9e6ab6c1c
File size:3'551'744 bytes
File download: Original Unpacked
MIME type:application/x-dosexec
MD5 hash: 011f1acdb25c87a876f44148647020d2
SHA1 hash: f83e6d2f90313fa29eeb48f9ede9450143fecfdb
SHA3-384 hash: 319c5cff73033358db5daaa2534550c84e3c13db9f1c23956808fea741000ac12f245fcafbc615ce1219b005491a147e
First seen:2025-11-21 00:01:29 UTC
Last seen:Never
Sightings:1
imphash : b35104995a20cf90efd05cc341f4e575
Create hunting rule
ssdeep : 49152:qkcqcUJXlyLAYP0Ru8h8zpPeWJheA0uVd1JK:qCcmXluAoflPe4kDuVhK
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:3b927700-c66d-11f0-adeb-42010aa4000b
File name:011f1acdb25c87a876f44148647020d2
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:SecuriteInfo.com.Trojan.Packed2.49423-1.UNOFFICIAL
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:meth_stackstrings
Create hunting rule
Author:Willi Ballenthin
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.