YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash be1bc4878ff88e998f24ac22e57ba1f61dec3cbcc49346bdbb1925c0a6beddb3.

SHA256 hash:	be1bc4878ff88e998f24ac22e57ba1f61dec3cbcc49346bdbb1925c0a6beddb3
File size:	2'652'410 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	07aeaa87c87f20f5e8061b7d60da5c1e
SHA1 hash:	16bea534b202a3e478a553f0613d73f6f6c96e64
SHA3-384 hash:	3f471139f03c69ecc1e93180c5e7d2f8cffb2d08a467a098c36663896a744b01895ff6b419dd51094b69f1032cee21e1
First seen:	2026-03-11 15:29:53 UTC
Last seen:	Never
Sightings:	1
imphash :	n/a
ssdeep :	24576:/1flT/Vk3HYZ7WUtLpwbtLpwCxI7Hh9ZBXf9dZe0p4Ek4niOkl/A04szE87JKTvT:/nTJbtL2tLFO7HhpteW4SkZP4sz9MbT
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

Signature:	SecuriteInfo.com.W64.Agent.CPJ.tr.27432.16437.UNOFFICIAL Create hunting rule

Signature:	Win.Malware.Dqan-9933037-0 Create hunting rule

The following YARA rules matched on the file (static analysis).

Rule name:	DebuggerCheck__API Create hunting rule
Reference:	https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:	TLP:WHITE

Rule name:	DetectEncryptedVariants Create hunting rule
Author:	Zinyth
Description:	Detects 'encrypted' in ASCII, Unicode, base64, or hex-encoded
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	golang_bin_JCorn_CSC846 Create hunting rule
Author:	Justin Cornwell
Description:	CSC-846 Golang detection ruleset
TLP:	TLP:WHITE
Repository:	YARAify

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-03-11 15:29:54 UTC Static: 3 Unpacker: 0 ClamAV: 2