YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash a39a3003a8f7295231eecc374bf13cc6ba0dca758cf0691be8ab9aad18cbbd67.

Scan Results

SHA256 hash: a39a3003a8f7295231eecc374bf13cc6ba0dca758cf0691be8ab9aad18cbbd67
File size:106'344 bytes
File download: Original
MIME type:application/vnd.openxmlformats-officedocument.wordprocessingml.document
MD5 hash: 1d6554474283bc800019b0bf94e36320
SHA1 hash: eb1af2ea6dbe01af7cc852843f2cb4adf11c9a29
SHA3-384 hash: 1e2fbb56787d151fadb1f0c828459ef9532e28803a4a0588393e5f3375ae1a7d21bce91eb6742ce07149938127167520
First seen:2026-01-21 16:45:00 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 1536:hMApu2xCm7rZHIlr/CGD5uLmdU5IAUjEUh/PpkHNOiC39WKvMP0JSOUQiWBNSC/t:hMn+Cm7rZHuCTmS6XjECGSWaBUGb/2g
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 0 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:86d71f4d-f6e8-11f0-9df4-42010aa4000b
File name:1d6554474283bc800019b0bf94e36320
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:DetectEncryptedVariants
Create hunting rule
Author:Zinyth
Description:Detects 'encrypted' in ASCII, Unicode, base64, or hex-encoded
TLP:TLP:WHITE
Repository:YARAify
Rule name:RANSOMWARE
Create hunting rule
Author:ToroGuitar
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.