YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash f7dbda895214252b9acaf0f081f3ca43f40329c6656b7b6f20a2ddc8b7d9a7d4.

Scan Results

SHA256 hash: f7dbda895214252b9acaf0f081f3ca43f40329c6656b7b6f20a2ddc8b7d9a7d4
File size:76'288 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 1e2cb98cab5bea3a07238514889d88e1
SHA1 hash: bc0fe17985a179d73beb670fd1533e035078f7f5
SHA3-384 hash: 7332e7d7003e5e685d1c2c5793acff9ead25c3ebea2055c581a9e86fa90dc7f3bb4f6641ff84f9363377720f469899a4
First seen:2026-01-15 15:29:13 UTC
Last seen:Never
Sightings:1
imphash : a52479e29d472dfe3687e3aebb25a214
Create hunting rule
ssdeep : 1536:to5QSkSfPGBvskwZ+Hpx2O92hLFCC+mbGxE/yYhruXuLHfRi3Tn0R:tnrIgvskwZ+Hpxh92XCybGxbFuLHfRik
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:f202060f-f226-11f0-9df4-42010aa4000b
File name:1e2cb98cab5bea3a07238514889d88e1
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:FreddyBearDropper
Create hunting rule
Author:Dwarozh Hoshiar
Description:Freddy Bear Dropper is dropping a malware through base63 encoded powershell scrip.
TLP:TLP:WHITE
Repository:YARAify
Rule name:golang_bin_JCorn_CSC846
Create hunting rule
Author:Justin Cornwell
Description:CSC-846 Golang detection ruleset
TLP:TLP:WHITE
Repository:YARAify
Rule name:classified
Author:classified
Description:classified
Reference:classified
TLP :TLP:AMBER
Rule name:pe_detect_tls_callbacks
Create hunting rule
Author:
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.