YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash cb0eca25a0103974d10fa3dbba18367020050a9c2ad1ffafba68e6c2df778059.

Scan Results

SHA256 hash: cb0eca25a0103974d10fa3dbba18367020050a9c2ad1ffafba68e6c2df778059
File size:479'843 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 0fe174badf06b63d56981f7dc7322c6f
SHA1 hash: 115cf50f38852d3c0a798165db831bcbdeb03d46
SHA3-384 hash: 75ff35db536f8d1cd94f61b291d8802b4beeb70ed5124260e595411f32c6c9c0dec02ef56dc141ee9c85e861d4964982
First seen:2026-03-25 16:28:02 UTC
Last seen:Never
Sightings:1
imphash : 5d6cad172c5535e4b6b6bbd246571621
Create hunting rule
ssdeep : 3072:6yoVoRIQRF5/Jb46qkyqhf8yUYXjR6cX5nHxj0rvOyJcM4HkC37X:6y+o/T/JZq7qhfN7PQOyOZHkC
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:98198abf-2867-11f1-b47f-42010aa4000b
File name:0fe174badf06b63d56981f7dc7322c6f
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Malware.Midie-6847894-0
Create hunting rule
Signature:Win.Malware.Midie-6848630-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:SEH__vba
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:telebot_framework
Create hunting rule
Author:vietdx.mb
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.