YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash b5db58deedb6e4d14768f743b5c6fa924d8029a9e51f9aa12a57495469262a44.

Scan Results

SHA256 hash: b5db58deedb6e4d14768f743b5c6fa924d8029a9e51f9aa12a57495469262a44
File size:104'059 bytes
File download: Original
MIME type:application/vnd.openxmlformats-officedocument.wordprocessingml.document
MD5 hash: bf11c6a4ab51a370f4b8411356a2c7e0
SHA1 hash: 164461b5d5cc4b8e5481ae0bc029fe99c11d6600
SHA3-384 hash: 8e5d1c7ee10a2948820bbf63b7ba1291d117a5e7f8bbaba131107dc75d5bfe5767076fedb22f8f4d8a52d03bb288cb0c
First seen:2026-01-19 18:13:15 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 1536:0ucHH011Tm7rZHI0r/CGD5uLmdUv+1CKZamcaQ8QaqvbMyNc8l8/h4XtNTs4UFLU:OHeBm7rZHlCTmSG1EmcaCRq4XLTsBFg
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 0 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:865b4ba7-f562-11f0-9df4-42010aa4000b
File name:bf11c6a4ab51a370f4b8411356a2c7e0
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:DetectEncryptedVariants
Create hunting rule
Author:Zinyth
Description:Detects 'encrypted' in ASCII, Unicode, base64, or hex-encoded
TLP:TLP:WHITE
Repository:YARAify
Rule name:RANSOMWARE
Create hunting rule
Author:ToroGuitar
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.