YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash b054e0d2be6419e7c4e5a44e0b69b9a470d67603ce76a484b609d349a6f89f90.

Scan Results

SHA256 hash: b054e0d2be6419e7c4e5a44e0b69b9a470d67603ce76a484b609d349a6f89f90
File size:93'334 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 71dcda41be0eced938ee0de794db9226
SHA1 hash: 439a7a6c79e6dbcf4782698bd1f29843be641528
SHA3-384 hash: 00e7004d511f23b58ee62ca0984ba2f231fa81a50bafc9c006919d947b0f840a9ff4be8d8f63d6d95bca746543c3ac66
First seen:2026-01-15 15:25:16 UTC
Last seen:Never
Sightings:1
imphash : 576aaf61949692919199cdfbdfa6c9d9
Create hunting rule
ssdeep : 1536:kGFOID9oKhFISOmZNuTOxaMAkRcjYC4u9EeFDsliIuOLD1OAZZd7CkkD2jCDyX7V:9H2m+TZkRk4wsliIvf1Om7kajCOXs0
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:6535bdd0-f226-11f0-9df4-42010aa4000b
File name:71dcda41be0eced938ee0de794db9226
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:classified
Author:classified
Description:classified
TLP :TLP:AMBER
Rule name:Check_OutputDebugStringA_iat
Create hunting rule
TLP:TLP:WHITE
Repository:
Rule name:DebuggerCheck__API
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:FreddyBearDropper
Create hunting rule
Author:Dwarozh Hoshiar
Description:Freddy Bear Dropper is dropping a malware through base63 encoded powershell scrip.
TLP:TLP:WHITE
Repository:YARAify
Rule name:PE_Digital_Certificate
Create hunting rule
Author:albertzsigovits
TLP:TLP:WHITE
Repository:

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.