YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash b03b0b2a7dfb9177146c65e2f360e964dfaf735001d53a6c2ef1bfb0d9488560.

Scan Results

SHA256 hash: b03b0b2a7dfb9177146c65e2f360e964dfaf735001d53a6c2ef1bfb0d9488560
File size:290'816 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 83d9a3ced84d66ade51c8f6ed79340e3
SHA1 hash: cabc56bf9b242e1b8b0956b660eec62056963746
SHA3-384 hash: 1107e6d0ff21eea656651370533d7472329c6e644b32fb68fc8f3407d25ec22610551d80d354d86ad27a7eae52637cd0
First seen:2025-11-21 02:52:16 UTC
Last seen:Never
Sightings:1
imphash : 452d19117ddea2739393fea7e8fe1edc
Create hunting rule
ssdeep : 6144:SEhnJ8k8SrYqaAwRUys8QB5jawzSf0lMKoayGr/lbIvj1:SE5JmEYqaYytm1ef0l/oayGr9k1
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:16f91e3d-c685-11f0-adeb-42010aa4000b
File name:5f0000.dll
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Packed.Razy-9934987-0
Create hunting rule
Signature:Win.Trojan.Agent-1349260
Create hunting rule
Signature:Win.Trojan.Agent-1376290
Create hunting rule
Signature:Win.Virus.Ursnif-9769699-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:CP_Script_Inject_Detector
Create hunting rule
Author:DiegoAnalytics
Description:Detects attempts to inject code into another process across PE, ELF, Mach-O binaries
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.