YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash f07bcec6f48693c45547e2e0fbd15e8ecbcdb4f342e8de8a273e54d5ef4536c2.

Scan Results

SHA256 hash: f07bcec6f48693c45547e2e0fbd15e8ecbcdb4f342e8de8a273e54d5ef4536c2
File size:5'360'640 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 173006cf47a40ec3f1124ed4bbbd1413
SHA1 hash: 45c8a806101fe5b8f77656607d5c698a56267e79
SHA3-384 hash: d7aec5e75d0154153f5287c6cd34b1374286e54672a154b68b28510639ff5a1ba6972e7623778fff7f3fe4566a309b4a
First seen:2026-04-27 14:53:29 UTC
Last seen:Never
Sightings:1
imphash : 0f6ae4919b30fbe072199d30660fe179
Create hunting rule
ssdeep : 98304:ZRzeZ4r8FuYHmjULaZ0B+nxvJgbWG55bKKe28ljG72lctRv4vIusYlY8Yup6d:iZ4zumj8aOVli1/0vGIglbp
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:da7e2bb1-4248-11f1-badc-42010aa4000b
File name:173006cf47a40ec3f1124ed4bbbd1413
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:golang_bin_JCorn_CSC846
Create hunting rule
Author:Justin Cornwell
Description:CSC-846 Golang detection ruleset
TLP:TLP:WHITE
Repository:YARAify
Rule name:TH_AntiVM_MassHunt_Win_Malware_2026_CYFARE
Create hunting rule
Author:CYFARE
Description:Detects Windows malware employing anti-VM / anti-sandbox evasion techniques across VMware, VirtualBox, Hyper-V, QEMU, Xen, and generic sandbox environments
Reference:https://cyfare.net/
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.