YARAify Scan Results

Task Information

---

Task ID:	6d800df0-c437-11f1-b2b6-42010aa4000b
File name:	ef549f315d3af072ff7db4c7f65cdf1e7a9b30bb3a0143a6f9ef7b2d2dc2ffec.elf
Task parameters:	ClamAV scan:	True
	Unpack:	False
	Share file:	True

ClamAV Results

---

The file matched the following open source and commercial ClamAV rules.

YARA Results

---

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:	dependsonpythonailib Alert Create hunting rule
Author:	Tim Brown
Description:	Hunts for dependencies on Python AI libraries
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	ELF_IoT_Persistence_Hunt Alert Create hunting rule
Author:	4r4
Description:	Hunts for ELF files with persistence and download capabilities
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	ELF_Mirai Alert Create hunting rule
Author:	NDA0E
Description:	Detects multiple Mirai variants
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	enterpriseapps2 Alert Create hunting rule
Author:	Tim Brown @timb_machine
Description:	Enterprise apps
TLP:	TLP:WHITE
Repository:	MalwareBazaar

Rule name:	test_rule_vldslv Alert Create hunting rule
Author:
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	TH_Generic_MassHunt_Linux_Malware_2026_CYFARE Alert Create hunting rule
Author:	CYFARE
Description:	Generic Linux malware mass-hunt rule - 2026
Reference:	https://cyfare.net/
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	unixredflags3 Alert Create hunting rule
Author:	Tim Brown @timb_machine
Description:	Hunts for UNIX red flags
TLP:	TLP:WHITE
Repository:	MalwareBazaar

Rule name:	virustotal Alert Create hunting rule
Author:	Tracel
TLP:	TLP:WHITE
Repository:	MalwareBazaar

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

---

The following files could be unpacked from this sample.