YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash abd7d38b29b357a4ca2b2acfd8a4fc7fdf785c715ad809f27fa68d934cd41a19.

SHA256 hash:	abd7d38b29b357a4ca2b2acfd8a4fc7fdf785c715ad809f27fa68d934cd41a19
File size:	94'208 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	214c641de04633d3169ebc09b30a0417
SHA1 hash:	b23bb5380a3019c0545929a094df3e68a3a05eb2
SHA3-384 hash:	8124057de5e0c988bd71e43f6db8a8b032bb291e13321c8a13df37b464a779e7670f0149dfff9d94b0a88617cd8c6794
First seen:	2026-04-27 14:53:49 UTC
Last seen:	Never
Sightings:	1
imphash :	5137385074536a8cba9018ed1b3a712c Create hunting rule
ssdeep :	1536:uuoounozGjfvKp0azPq05Kz6e4gUeNjkqOy8OjV:uuoFomXKGazy05XyUe5pf8q
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	PE_Digital_Certificate Create hunting rule
Author:	albertzsigovits
TLP:	TLP:WHITE
Repository:

Rule name:	VECT_Ransomware Create hunting rule
Author:	Mustafa Bakhit
Description:	Detects activity associated with VECT ransomware. This includes registry modifications and deletions, execution of system and defense-evasion commands, suspicious API usage, mutex creation, file and memory manipulation, ransomware note generation, anti-debugging and anti-analysis techniques, and embedded cryptographic constants (SHA256) characteristic of this malware family. Designed for threat intelligence and malware detection environments.
TLP:	TLP:WHITE
Repository:	YARAify

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-04-27 14:53:49 UTC Static: 2 Unpacker: 0 ClamAV: 0