YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash e3358c1c11985217566ab3f4d24d1c9b9a677c174095146e534a1a41ab3b8048.

Scan Results

SHA256 hash: e3358c1c11985217566ab3f4d24d1c9b9a677c174095146e534a1a41ab3b8048
File size:602'569 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: ec9b527fe365af512bbb4d48e8cddec4
SHA1 hash: 9d9eabda4d703746794b29886bd41d5dc6c070dc
SHA3-384 hash: cc8f9b32b854747cc986e93021cb40a4a830a153bbde5d5cb892f7b27af49c62bbb8122f4a5a338e7890588fbf845638
First seen:2023-03-26 23:55:37 UTC
Last seen:Never
Sightings:1
imphash : 2c2ad1dd2c57d1bd5795167a7236b045
Create hunting rule
ssdeep : 3072:CCaoAs101Pol0xPTM7mRCAdJSSxPUkl3Vn4MQTCk/dN92sdNhavtrVdewnAx3wmP:CqDAwl0xPTMiR9JSSxPUK8dodH5rM
TLSH : T1D2D4F8137721CC61F5D057B6A2A6C33476B49A1435B3DA13BFECAC62BF702518B1E60A
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:b49f74e3-cc31-11ed-866d-42010aa4000b
File name:400000.Sysqembojag.exe
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Malware.Dqqw-9951425-0
Create hunting rule
Signature:Win.Malware.Zusy-6804618-0
Create hunting rule
Signature:Win.Trojan.QQPass-5710308-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:meth_get_eip
Create hunting rule
Author:Willi Ballenthin
TLP:TLP:WHITE
Repository:YARAify
Rule name:QbotStuff
Create hunting rule
Author:anonymous
TLP:TLP:WHITE
Repository:MalwareBazaar

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.