YARAify Scan Results
You are viewing the YARAify database entry for the file with the SHA256 hash c424cef8ade79dab30ad4e6b688ac8bb7c5099ebea863e072d7a745db0b58e88.
Scan Results
| SHA256 hash: | c424cef8ade79dab30ad4e6b688ac8bb7c5099ebea863e072d7a745db0b58e88 | |
|---|---|---|
| File size: | 19'491 bytes | |
| File download: | Original | |
| MIME type: | text/x-shellscript | |
| MD5 hash: | 5e4c2751374eac2e48b85eaa34d4f3ab | |
| SHA1 hash: | 893e9589cbabe0e881409f7d669ca17ac273f6a6 | |
| SHA3-384 hash: | 8f78e30d05a48239cfca81e6215fd4d7e3a5d2119920ade16528b60dd3ab227bb94258b904873f981e4addcdc7303e9c | |
| First seen: | 2026-03-14 20:00:30 UTC | |
| Last seen: | Never | |
| Sightings: | 1 | |
| imphash : | n/a | |
| ssdeep : | 384:fP4ncuxOLnVYMS0zsO9a4cbddrME8jyfzsO9a4cbddrME8jy4:HbuQL+0zsP4cbddr7zsP4cbddrk | |
| TLSH : | n/a | |
| telfhash : | n/a | |
| gimphash : | n/a | |
| dhash icon : | n/a | |
Tasks
There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.
Task Information
| Task ID: | 73fa60d2-1fe0-11f1-b47f-42010aa4000b | |
|---|---|---|
| File name: | c424cef8ade79dab30ad4e6b688ac8bb7c5099ebea863e072d7a745db0b58e88.sh | |
| Task parameters: | ClamAV scan: | True |
| Unpack: | False | |
| Share file: | True | |
ClamAV Results
The file matched the following open source and commercial ClamAV rules.
No matches
YARA Results
Static Analysis
The following YARA rules matched on the file (static analysis).
| Rule name: | SUSP_LNX_Base64_Exec_Apr24 |
|---|---|
| Author: | Christian Burkard |
| Description: | Detects suspicious base64 encoded shell commands (as seen in Palo Alto CVE-2024-3400 exploitation) |
| Reference: | Internal Research |
| TLP: | TLP:WHITE |
Unpacker
The following YARA rules matched on the unpacked file.
Disabled by submitter
Unpacked Files
The following files could be unpacked from this sample.
Disabled by submitter