YARAify Scan Results

Task Information

---

Task ID:	76b3c522-b418-11f1-a0cd-42010aa4000b
File name:	f729df914abbfdcbcfe6efa95f811c5cee80f8983ad8acc9d1ee87bf5eb8d924.elf
Task parameters:	ClamAV scan:	True
	Unpack:	False
	Share file:	True

ClamAV Results

---

The file matched the following open source and commercial ClamAV rules.

YARA Results

---

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:	ELF_IoT_DVR_Botnet_Hama_UPX Alert Create hunting rule
Author:	Serhii Kocherhan
Description:	Detects packed and unpacked ELF IoT/DVR botnet variants targeting UPX compression structures and uncompressed code
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	linux_generic_ipv6_catcher Alert Create hunting rule
Author:	@_lubiedo
Description:	ELF samples using IPv6 addresses
TLP:	TLP:WHITE
Repository:	Stratosphere

Rule name:	SUSP_ELF_LNX_UPX_Compressed_File Alert Create hunting rule
Author:	Florian Roth (Nextron Systems)
Description:	Detects a suspicious ELF binary with UPX compression
Reference:	Internal Research
TLP:	TLP:WHITE
Repository:	Neo23x0

Rule name:	TH_Generic_MassHunt_Linux_Malware_2026_CYFARE Alert Create hunting rule
Author:	CYFARE
Description:	Generic Linux malware mass-hunt rule - 2026
Reference:	https://cyfare.net/
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	upx_packed_elf_v1 Alert Create hunting rule
Author:	RandomMalware
TLP:	TLP:WHITE
Repository:	YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

---

The following files could be unpacked from this sample.