YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash d6bc842efe73df81da62391e1f1b9ec54bf8f6485dd71be8dfe098fa32e711be.

SHA256 hash:	d6bc842efe73df81da62391e1f1b9ec54bf8f6485dd71be8dfe098fa32e711be
File size:	328'080 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	49cb71065db368ec5d7e105cd2ec5394
SHA1 hash:	b5af3067b02bb9b85bbb9f28a32bc75c881de13d
SHA3-384 hash:	bb70e28dc570b89d801a3115ea584798ccbe12a511814815fa19bfcb4c5218a73b58331b55e6da953799f1f8c435c92a
First seen:	2026-01-15 15:29:08 UTC
Last seen:	Never
Sightings:	1
imphash :	5228e7047a0b328e3b64ee71c48d4223 Create hunting rule
ssdeep :	3072:iAHNSduf+LnpIP+I+t7RJDwg2cITRU700M+4eYH6KUsquJsJsmFiA/Nksym+q/C0:vwMJvFU4h+4eQQdVK0Kasc
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	8c333333174c3002 Create hunting rule

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	cobalt_strike_tmp01925d3f Create hunting rule
Author:	The DFIR Report
Description:	files - file ~tmp01925d3f.exe
Reference:	https://thedfirreport.com
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	DebuggerCheck__API Create hunting rule
Reference:	https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:	TLP:WHITE

Rule name:	golang_bin_JCorn_CSC846 Create hunting rule
Author:	Justin Cornwell
Description:	CSC-846 Golang detection ruleset
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	pe_detect_tls_callbacks Create hunting rule
Author:
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	PE_Digital_Certificate Create hunting rule
Author:	albertzsigovits
TLP:	TLP:WHITE
Repository:

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-01-15 15:29:08 UTC Static: 5 Unpacker: 0 ClamAV: 0