YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash f3c340c39a033a3c1b4e019f4f07aa6eaccb208b4d9331fca57b79d413667fa1.

SHA256 hash:	f3c340c39a033a3c1b4e019f4f07aa6eaccb208b4d9331fca57b79d413667fa1
File size:	148'533 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	00280ddfa3723f36dab45b836eb8582e
SHA1 hash:	d6b5028d6218dbdc57b708d6dc8fe585efb6ef22
SHA3-384 hash:	1f143a52e27ce2db19d4d1ff4639dcdb0f7e68858991044e7ac51673acb0576cc07924d4a5e22bd18b2e8a44aea7a0e9
First seen:	2026-04-27 14:40:51 UTC
Last seen:	Never
Sightings:	1
imphash :	48bd9c6c609b72a1f0587d37f4e7e086 Create hunting rule
ssdeep :	3072:YhNsFVhsnhv7us4ROc78CtMWDrJr573T8rGXwSCCHgV1vnSz1LcEI:YcyvOP78UJr57j8ADHgzhN
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	a2a2e0f0f0e8a282 Create hunting rule

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	golang_bin_JCorn_CSC846 Create hunting rule
Author:	Justin Cornwell
Description:	CSC-846 Golang detection ruleset
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	VECT_Ransomware Create hunting rule
Author:	Mustafa Bakhit
Description:	Detects activity associated with VECT ransomware. This includes registry modifications and deletions, execution of system and defense-evasion commands, suspicious API usage, mutex creation, file and memory manipulation, ransomware note generation, anti-debugging and anti-analysis techniques, and embedded cryptographic constants (SHA256) characteristic of this malware family. Designed for threat intelligence and malware detection environments.
TLP:	TLP:WHITE
Repository:	YARAify

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-04-27 14:40:51 UTC Static: 4 Unpacker: 0 ClamAV: 0