YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash cd8fa0277d0921f299347f6ff332e18c7b2acac7004f7de099e1dcefcddbd736.

Scan Results

SHA256 hash: cd8fa0277d0921f299347f6ff332e18c7b2acac7004f7de099e1dcefcddbd736
File size:484'529 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 3d66c4c80e6f06ffdd9be16ddb3bc108
SHA1 hash: aed73218ae7a03638b3457271e31a25b3ea38583
SHA3-384 hash: 780db7bcee2b3eacc5072b2407e0087121e96526d0af839457ecacd3d035169099ce8ba974cc5728c7c0f972fa507dc4
First seen:2022-11-24 19:45:14 UTC
Last seen:Never
Sightings:1
imphash : 63ecf1fe5b1b7f5242123c19b64fe779
Create hunting rule
ssdeep : 6144:tMaYOGmNREF5YpDESvwINTJreeTEMtWqyPuOut56azQXSEc9wfLrBwLFkp/0lVck:tMKvEHYp4SvvR5bltuuOutI1XS0aQ/L
TLSH : T1E8A47B27FA90853BD1531F745C6BA562B43CBFD426388A873BAC294C1F7A79138052E7
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:83a9c31c-6c30-11ed-a71a-42010aa4000b
File name:5240000.aei2D04.tmp
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:command_and_control
Create hunting rule
Author:CD_R0M_
Description:This rule searches for common strings found by malware using C2. Based on a sample used by a Ransomware group
TLP:TLP:WHITE
Repository:CD-R0M

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.