🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash b61ad616f69fadf17eac2c906ed85ffa1374f2b472cdc08a76466d2a09997f14.

Scan Results


SHA256 hash: b61ad616f69fadf17eac2c906ed85ffa1374f2b472cdc08a76466d2a09997f14
File size:5'316'608 bytes
File download: Original
MIME type:application/octet-stream
MD5 hash: cdf2fd36f6db342caa8eff7150493922
SHA1 hash: 6a044375dff5f5ac432cb535388b12b0dce40c45
SHA3-384 hash: d256f8796a9368c8609aa07bacfb5d9a60c4fcf09827d84c3f94f6a4c6516b172f14a414d79ccc1a04a989ae58b7ec86
First seen:2026-10-10 10:19:34 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 49152:U0r9vRuJMBrjw8B2fY1kAM42bK4ljdUytp0sD+0Y3rw:Hr9J26rrB2fY1fMzbDl7tp0w
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks


There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information


Task ID:1771d7d9-c494-11f1-b2b6-42010aa4000b
File name:4400000.shc
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results


The file matched the following open source and commercial ClamAV rules.

YARA Results


Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:MALWARE_Win_AsyncRAT
Author:ditekSHen
Description:Detects AsyncRAT
TLP:TLP:WHITE
Repository:diˈtekSHən
Rule name:NET
Author:malware-lu
TLP:TLP:WHITE
Repository:

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files


The following files could be unpacked from this sample.