YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash e685b61dfb1ff9838b1d63240866fafc683b8e427c56d66778fd16f46cbfbfc0.

Scan Results

SHA256 hash: e685b61dfb1ff9838b1d63240866fafc683b8e427c56d66778fd16f46cbfbfc0
File size:1'295'607 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 186d4d77eb289db6a45ba1f8352aa7c7
SHA1 hash: 1d132400ac2c3ab35bc76ecd6478f418bb179dec
SHA3-384 hash: 5d20772e372236f933ddb4ab10b0aa5de643f882813b243fdfb372997675adb9fd8c739a5ef62ab3a1635a9d07fc8bad
First seen:2026-03-25 16:20:33 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 24576:vBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMxA7zqfpgoksSOll:r56uL3pgrCEdTZ
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:8cd866ce-2866-11f1-b47f-42010aa4000b
File name:186d4d77eb289db6a45ba1f8352aa7c7
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Malware.Generickdz-9831451-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:classified
Author:classified
Description:classified
Rule name:GoBinTest
Create hunting rule
TLP:TLP:WHITE
Repository:MalwareBazaar
Rule name:golang_bin_JCorn_CSC846
Create hunting rule
Author:Justin Cornwell
Description:CSC-846 Golang detection ruleset
TLP:TLP:WHITE
Repository:YARAify
Rule name:golang_binary_string
Create hunting rule
Description:Golang strings present
TLP:TLP:WHITE
Repository:MalwareBazaar
Rule name:Golang_Find_CSC846
Create hunting rule
Author:Ashar Siddiqui
Description:Find Go Signatuers
TLP:TLP:WHITE
Repository:YARAify
Rule name:Golang_Find_CSC846_Simple
Create hunting rule
Author:Ashar Siddiqui
Description:Find Go Signatuers
TLP:TLP:WHITE
Repository:YARAify
Rule name:classified
Rule name:classified
Rule name:pe_no_import_table
Create hunting rule
Author:
Description:Detect pe file that no import table
TLP:TLP:WHITE
Repository:YARAify
Rule name:telebot_framework
Create hunting rule
Author:vietdx.mb
TLP:TLP:WHITE
Repository:YARAify
Rule name:vmdetect
Create hunting rule
Author:nex
Description:Possibly employs anti-virtualization techniques
TLP:TLP:WHITE
Repository:

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.