YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash ffe7c197f94d113a171a8e82a420f7c63a5463c7a3ae5fcd25894e220d180a02.

SHA256 hash:	ffe7c197f94d113a171a8e82a420f7c63a5463c7a3ae5fcd25894e220d180a02
File size:	11'264 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	19458dca1f8acfb0e4bfb111b0a2d630
SHA1 hash:	490e18250b5e1885db1bc6523f2c0c9b023c388f
SHA3-384 hash:	377c0bcf5755b931df269b275db276efa2b441ed2103920524c4c58c682cc070f45b2dd7e3e445141bb9156879762fd4
First seen:	2026-03-29 17:24:57 UTC
Last seen:	Never
Sightings:	1
imphash :	c8925dc08431c109a962996e462f68b3 Create hunting rule
ssdeep :	192:wP0jM1/1IoSqLJT1eiFMHKez8MQOXNCWuI3d9/MnpulF/E2IiQ5W6x1qzW:wPau1VSS51e/HKezXnxtlF/EW6W6T4W
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	DebuggerCheck__QueryInfo Create hunting rule
Reference:	https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:	TLP:WHITE

Rule name:	VECT_Ransomware Create hunting rule
Author:	Mustafa Bakhit
Description:	Detects activity associated with VECT ransomware. This includes registry modifications and deletions, execution of system and defense-evasion commands, suspicious API usage, mutex creation, file and memory manipulation, ransomware note generation, anti-debugging and anti-analysis techniques, and embedded cryptographic constants (SHA256) characteristic of this malware family. Designed for threat intelligence and malware detection environments.
TLP:	TLP:WHITE
Repository:	YARAify

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-03-29 17:24:57 UTC Static: 2 Unpacker: 0 ClamAV: 0