YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash d3c5d820c190312c4649ff1b50402cc089ecd458727fdf57caa5240a5d2ab0b9.

SHA256 hash:	d3c5d820c190312c4649ff1b50402cc089ecd458727fdf57caa5240a5d2ab0b9
File size:	225'689 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	78e09e08fc0ef08516236b19f66afa55
SHA1 hash:	f27901b03f6d81d42f28a0ea81e38fd9537174d5
SHA3-384 hash:	a733455f98dc90fe5918d20cbe9b0b3d765fc9f45dbabb27dfb0c6c16c807383ea33c87beae3ba57c8a165cf74d4a1db
First seen:	2026-10-09 22:45:59 UTC
Last seen:	Never
Sightings:	1
imphash :	0df0b493236c092f61158495fa5cbbc6 Create hunting rule
ssdeep :	3072:Oxuz74e655hAiwby/zz8oSXipS39DvbtX7ggf1tpPMk:OEC55hAWE0S39Dv97gmL0k
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	VECT_Ransomware Create hunting rule
Author:	Mustafa Bakhit
Description:	Detects activity associated with VECT ransomware. This includes registry modifications and deletions, execution of system and defense-evasion commands, suspicious API usage, mutex creation, file and memory manipulation, ransomware note generation, anti-debugging and anti-analysis techniques, and embedded cryptographic constants (SHA256) characteristic of this malware family. Designed for threat intelligence and malware detection environments.
TLP:	TLP:WHITE
Repository:	YARAify

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-10-09 22:45:59 UTC Static: 1 Unpacker: 0 ClamAV: 0