YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash edb9b9ed16ca320984b30fc6bdb7c8d1285bbf456aa247677216a0362a455d53.

SHA256 hash:	edb9b9ed16ca320984b30fc6bdb7c8d1285bbf456aa247677216a0362a455d53
File size:	217'088 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	79aac2ef86e5ff6b74cb3910b2552e66
SHA1 hash:	6d47d95b4ed7651ff23c92333ff750d0571d49c2
SHA3-384 hash:	a50aa806ae4c4115b0630bdac382ea9073b7f3c75b40bf2e90c154e9c237da00964501e9223ae5c3099cf5f7b8125e3b
First seen:	2026-02-11 17:31:24 UTC
Last seen:	Never
Sightings:	1
imphash :	4dcbc0931c6f88874a69f966c86889d9 Create hunting rule
ssdeep :	768:7DApAJmxwUh6zO5g7Wfb8BvTRbdUE6Sijv7xCI5kajX/1H5YhIKKG4:XsASwKScoNSLDhma9yhV
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

Signature:	PUA.Win.Packer.Lccwin-2 Create hunting rule

Signature:	SecuriteInfo.com.BackDoor.HangUp.43791.UNOFFICIAL Create hunting rule

Signature:	SecuriteInfo.com.BackDoor.HangUp.43914.UNOFFICIAL Create hunting rule

Signature:	SecuriteInfo.com.BackDoor.IRC.Tdongs.13538.21428.UNOFFICIAL Create hunting rule

Signature:	Win.Malware.Qukart-6838239-0 Create hunting rule

Signature:	Win.Trojan.Crypted-30 Create hunting rule

Signature:	Win.Trojan.Obfus-38 Create hunting rule

Signature:	Win.Trojan.Padodor-10016488-0 Create hunting rule

Signature:	Win.Trojan.Qukart-6874817-0 Create hunting rule

The following YARA rules matched on the file (static analysis).

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-02-11 17:31:25 UTC Static: 1 Unpacker: 0 ClamAV: 9