YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash bbf0be65c84350cbd8ff149dc77faaef156bc737c3b807c6fc624436384d5e38.

Scan Results

SHA256 hash: bbf0be65c84350cbd8ff149dc77faaef156bc737c3b807c6fc624436384d5e38
File size:1'886'208 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 0467f6619accebd91218cfafa725ea43
SHA1 hash: 9217f3acf834f273e1f3a6757a163758a1ed8766
SHA3-384 hash: c5f2b8c605d1c4f5a22ecb04ed31dd45f0c174c6af55e648965d352d17f14d9dbda2ab0cbf32b784e2278936fb0d8eaa
First seen:2026-03-11 15:29:40 UTC
Last seen:Never
Sightings:1
imphash : 41c55772e303b8488ea464a0538e35d5
Create hunting rule
ssdeep : 24576:z5jcAkSYqQEHyxknw4FYnshx8OfVe247:BpYqsx4x8EVep
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:1f33277f-1d5f-11f1-b47f-42010aa4000b
File name:0467f6619accebd91218cfafa725ea43
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:SecuriteInfo.com.Win32.Expiro-3.UNOFFICIAL
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:DebuggerException__SetConsoleCtrl
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:DetectEncryptedVariants
Create hunting rule
Author:Zinyth
Description:Detects 'encrypted' in ASCII, Unicode, base64, or hex-encoded
TLP:TLP:WHITE
Repository:YARAify
Rule name:RANSOMWARE
Create hunting rule
Author:ToroGuitar
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.