YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash b52cea36daa95d3801ce01c8636a6f7c8a2094e161aa27d5f61180ca3d19c4b0.

Scan Results

SHA256 hash: b52cea36daa95d3801ce01c8636a6f7c8a2094e161aa27d5f61180ca3d19c4b0
File size:1'038'264 bytes
File download: Original
MIME type:application/x-executable
MD5 hash: 1ab6230c3f979151353ba0a7315afa86
SHA1 hash: 305dc96fb1467eb9617778d2fe55d119c1333ff5
SHA3-384 hash: 8476a6305139a244712462abc8d2d7072065e425014bf8907ce32035b7c10c0afda31d7634fffc59d779eea6154128dc
First seen:2026-08-10 06:47:49 UTC
Last seen:2026-08-10 06:48:42 UTC
Sightings:2
imphash :n/a
ssdeep : 24576:7LVFk46qiOcsl7FyCwNfHwBhaMUwSsH3+TAW:vU46qD7nwNqaMUw5H3+
TLSH :n/a
telfhash : t168017b84387dc93d075fa62371b4fa4019f0540aa72223eeca399152fab1b50b0da2df
Create hunting rule
gimphash :n/a
dhash icon :n/a

Tasks

There are 2 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:866def2b-9487-11f1-bf07-42010aa4000b
File name:webmailkapixfr
Task parameters:ClamAV scan:True
Unpack:True
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:classified
Author:classified
Description:classified
TLP :TLP:GREEN
Rule name:CP_Script_Inject_Detector
Create hunting rule
Author:DiegoAnalytics
Description:Detects attempts to inject code into another process across PE, ELF, Mach-O binaries
TLP:TLP:WHITE
Repository:YARAify
Rule name:F01_s1ckrule
Create hunting rule
Author:s1ckb017
TLP:TLP:WHITE
Repository:MalwareBazaar
Rule name:ldpreload
Create hunting rule
Author:xorseed
Reference:https://stuff.rop.io/
TLP:TLP:WHITE
Repository:
Rule name:linux_generic_ipv6_catcher
Create hunting rule
Author:@_lubiedo
Description:ELF samples using IPv6 addresses
TLP:TLP:WHITE
Repository:Stratosphere
Rule name:malwareelf55503
Create hunting rule
Author:
TLP:TLP:WHITE
Repository:YARAify
Rule name:TH_Generic_MassHunt_Linux_Malware_2026_CYFARE
Create hunting rule
Author:CYFARE
Description:Generic Linux malware mass-hunt rule - 2026
Reference:https://cyfare.net/
TLP:TLP:WHITE
Repository:YARAify
Rule name:unixredflags3
Create hunting rule
Author:Tim Brown @timb_machine
Description:Hunts for UNIX red flags
TLP:TLP:WHITE
Repository:MalwareBazaar

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.

Task Information

Task ID:6752544d-9487-11f1-bf07-42010aa4000b
File name:cdrvma
Task parameters:ClamAV scan:True
Unpack:True
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:classified
Author:classified
Description:classified
TLP :TLP:GREEN
Rule name:CP_Script_Inject_Detector
Create hunting rule
Author:DiegoAnalytics
Description:Detects attempts to inject code into another process across PE, ELF, Mach-O binaries
TLP:TLP:WHITE
Repository:YARAify
Rule name:F01_s1ckrule
Create hunting rule
Author:s1ckb017
TLP:TLP:WHITE
Repository:MalwareBazaar
Rule name:ldpreload
Create hunting rule
Author:xorseed
Reference:https://stuff.rop.io/
TLP:TLP:WHITE
Repository:
Rule name:linux_generic_ipv6_catcher
Create hunting rule
Author:@_lubiedo
Description:ELF samples using IPv6 addresses
TLP:TLP:WHITE
Repository:Stratosphere
Rule name:malwareelf55503
Create hunting rule
Author:
TLP:TLP:WHITE
Repository:YARAify
Rule name:TH_Generic_MassHunt_Linux_Malware_2026_CYFARE
Create hunting rule
Author:CYFARE
Description:Generic Linux malware mass-hunt rule - 2026
Reference:https://cyfare.net/
TLP:TLP:WHITE
Repository:YARAify
Rule name:unixredflags3
Create hunting rule
Author:Tim Brown @timb_machine
Description:Hunts for UNIX red flags
TLP:TLP:WHITE
Repository:MalwareBazaar

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.