YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash df4e46d56a10bb6b4dfc686ee6d017143dfdc96ba2d509b1b610f5aceae16a51.

Scan Results

SHA256 hash: df4e46d56a10bb6b4dfc686ee6d017143dfdc96ba2d509b1b610f5aceae16a51
File size:6'958'744 bytes
File download: Original Unpacked
MIME type:application/x-dosexec
MD5 hash: ddd2dcd1bd337c0962ea19aa2505d579
SHA1 hash: 1482f7fdca3c6e8c654aa4e76d9e67b9225425a1
SHA3-384 hash: 82a0f872299f5d603f7b917e8f7fb04de1395f7f7de47697c75fa7f73e432169342e881610d0e3553a4b4e1206d7d038
First seen:2026-07-19 11:19:31 UTC
Last seen:2026-07-19 11:20:06 UTC
Sightings:2
imphash : 84702c834326954655d1118866ba2cf1
Create hunting rule
ssdeep : 49152:gHKQyy9sC131rhTEzs/0vMSkYxkLbXTIrdHyY:gHhjTIrdHt
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 2 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:cba0ce57-8363-11f1-ad5e-42010aa4000b
File name:ddd2dcd1bd337c0962ea19aa2505d579
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:Borland
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:DebuggerCheck__API
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:classified
Author:classified
Description:classified
Reference:classified
TLP :TLP:AMBER
Rule name:pe_detect_tls_callbacks
Create hunting rule
Author:
TLP:TLP:WHITE
Repository:YARAify
Rule name:PE_Digital_Certificate
Create hunting rule
Author:albertzsigovits
TLP:TLP:WHITE
Repository:
Rule name:telebot_framework
Create hunting rule
Author:vietdx.mb
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.

Task Information

Task ID:b7118a86-8363-11f1-ad5e-42010aa4000b
File name:df4e46d56a10bb6b4dfc686ee6d017143dfdc96ba2d509b1b610f5aceae16a51.exe
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:Borland
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:DebuggerCheck__API
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:classified
Author:classified
Description:classified
Reference:classified
TLP :TLP:AMBER
Rule name:pe_detect_tls_callbacks
Create hunting rule
Author:
TLP:TLP:WHITE
Repository:YARAify
Rule name:PE_Digital_Certificate
Create hunting rule
Author:albertzsigovits
TLP:TLP:WHITE
Repository:
Rule name:telebot_framework
Create hunting rule
Author:vietdx.mb
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.