YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash d8329b9c72e595eccae8808d624283dce84d057b5721bb149e38f265f4ceff3f.

SHA256 hash:	d8329b9c72e595eccae8808d624283dce84d057b5721bb149e38f265f4ceff3f
File size:	663'552 bytes
File download:	Original
MIME type:	application/vnd.microsoft.portable-executable
MD5 hash:	6212be4c8c52714b1547ebfedc1afb9f
SHA1 hash:	e0078728d5efe84174bb600b35c690c25295f070
SHA3-384 hash:	5c4f9b07f852d2f313fe45afd78eb5e6c1c265095b9377f612d1391bff4301741f346169218f337c6483fbff75bc3e1f
First seen:	2026-10-31 10:02:25 UTC
Last seen:	Never
Sightings:	1
imphash :	n/a
ssdeep :	12288:HmckPPyy1TeSjlQ9ovea03WnayPwN4jVYNQ:Gck3yy1Kv3WnnPpjVYN
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	b298acbab2ca7a72 Create hunting rule

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	ASPackv212AlexeySolodovnikov Create hunting rule
Author:	malware-lu
TLP:	TLP:WHITE
Repository:

Rule name:	ASProtectV2XDLLAlexeySolodovnikov Create hunting rule
Author:	malware-lu
TLP:	TLP:WHITE
Repository:

Rule name:	CMD_Ping_Localhost Create hunting rule
TLP:	TLP:WHITE
Repository:	MalwareBazaar

Rule name:	exploit_any_poppopret Create hunting rule
Author:	Jeff White [karttoon@gmail.com] @noottrak
Description:	Identify POP -> POP -> RET opcodes for quick ROP Gadget creation in target binaries.
TLP:	TLP:WHITE
Repository:	karttoon

Rule name:	VECT_Ransomware Create hunting rule
Author:	Mustafa Bakhit
Description:	Detects activity associated with VECT ransomware. This includes registry modifications and deletions, execution of system and defense-evasion commands, suspicious API usage, mutex creation, file and memory manipulation, ransomware note generation, anti-debugging and anti-analysis techniques, and embedded cryptographic constants (SHA256) characteristic of this malware family. Designed for threat intelligence and malware detection environments.
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	Winnti_NlaifSvc Create hunting rule
Author:	Florian Roth (Nextron Systems)
Description:	Winnti sample - file NlaifSvc.dll
Reference:	https://goo.gl/VbvJtL
TLP:	TLP:WHITE
Repository:	Neo23x0

Rule name:	Winnti_NlaifSvc_RID2CFF Create hunting rule
Author:	Florian Roth
Description:	Winnti sample - file NlaifSvc.dll
Reference:	https://goo.gl/VbvJtL
TLP:	TLP:WHITE

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-10-31 10:02:25 UTC Static: 7 Unpacker: 0 ClamAV: 0