YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash a2d8d9b277bd24642501e3441de08bb31dc93c31b01355163e9e3db8f013105d.

Scan Results


SHA256 hash: a2d8d9b277bd24642501e3441de08bb31dc93c31b01355163e9e3db8f013105d
File size:188'416 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 0bb7ef65e0f730ec75fc76e053979a31
SHA1 hash: 655bcc7612f710ac121a626b729bbfa7fa19743f
SHA3-384 hash: c71864ceaad8a2ea05bf100f0ed43bdb376cc6dce372f66bb241f2d62ad4f935bb4cb0953d79c06bd941e4701044d222
First seen:2026-02-11 17:24:02 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 3072:F4D+x6onP4tdJ1+HOmTfeJuqaNvnqnGiuMrq:F4BoaT1+FeMqaNPqnGiuMr
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon : 1003873db9313e10

Tasks


There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information


Task ID:75997efc-076e-11f1-82f6-42010aa4000b
File name:400000.14ed5fbab9ade433c7725ecce74fedfa.exe
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results


The file matched the following open source and commercial ClamAV rules.

Signature:Win.Dropper.Ajku-10014126-0
Signature:Win.Malware.Midie-6847892-0
Signature:Win.Malware.Midie-6847893-0
Signature:Win.Malware.Midie-6848784-0
Signature:Win.Malware.Zusy-6878655-0

YARA Results


Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:SEH__vba
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:telebot_framework
Author:vietdx.mb
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files


The following files could be unpacked from this sample.