YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash ccd0e56fa5d4789a81987c32d5a3876a8378d1e9ebefdbb500913f07ced58ea7.

SHA256 hash:	ccd0e56fa5d4789a81987c32d5a3876a8378d1e9ebefdbb500913f07ced58ea7
File size:	9'400'769 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	256fecab885f8f6d6979fe9ef0106473
SHA1 hash:	6a33ba32f94541970a12dd49fbda1551164bc9b0
SHA3-384 hash:	de108da0deb1192c666871868b75ea436693acba6bd37eef4516840cf2c7d075dc37e7ac9088889649855cc3cc3c4880
First seen:	2026-10-09 23:17:54 UTC
Last seen:	Never
Sightings:	1
imphash :	6f72f4f74545e0763ea902675c22486d Create hunting rule
ssdeep :	196608:veuZ/qQ2gXwCgG3orYsrEwzOxVmcsvqI6BZiQBpOgSJhSN:GYXBgGN2EFVmbKZ3BppSfS
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	golang_bin_JCorn_CSC846 Create hunting rule
Author:	Justin Cornwell
Description:	CSC-846 Golang detection ruleset
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	WIN_Malware_ACRStealer_ForgeAuto_1084c837_Extrait Create hunting rule
Author:	Marjoriefort
Description:	Detects ACRStealer (pe, etat extrait)
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	WIN_Malware_Fantom_ForgeAuto_98e6f354_Extrait Create hunting rule
Author:	Marjoriefort
Description:	Detects Fantom (pe, etat extrait)
TLP:	TLP:WHITE
Repository:	YARAify

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-10-09 23:17:54 UTC Static: 3 Unpacker: 0 ClamAV: 0