NEW | Hunt across all abuse.ch platforms with one simple query - discover if an IPv4 address, domain, URL or file hash has been identified on any platform from a centralized search tool. Test it out here hunting.abuse.ch - and happy hunting 🔍

YARAify Search

380'345

YARA scans
(past 24 hours)

22'151

YARA rules deployed
 

342'500

Megabytes of data scanned
(past 24 hours)

You can search the YARAify database below. Before you start, you may want to have a look at the search syntax.

Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • yara:MALWARE_Win_Zegost ( run)
  • clamav:Win.Dropper.Gh0stRAT-9789290-0 ( run)
  • imphash:1b365823829e2ac9bfb0aa5d328240a4 ( run)
  • tlsh:T140551236C8E05951CAEFD73315186AF983182477CCC9E5BB0E6B36D62CB6431A36B06D ( run)
  • telfhash:t1dd211d716b2195266ea0cd9088eca7b2512c97072349df33cf31849c24140aeea3ac4f ( run)
  • gimphash:a081e2fab5999d99ed6be718af55e93df171d14bc83c7ca5fdc0907edba0d338 ( run)
  • dhash_icon:92264e9e361ccdee ( run)
  • md5:bf130acead582841f356719dd6d29e98 ( run)
  • sha1:a0a4863bea2e364a5c5281a4f1a8b1361607b27a ( run)
  • sha256:cf6be26cbfc87fb85d345f97edd03ddc1f157c57fa3cd60da23a8cba71615842 ( run)
  • sha3_384:3d4ca8658c07062218a667fe4570f0de978ed6fd311a258124a0a81c3bb21f8e11920965694bbc8db186fb3527dfa6b4 ( run)
First seen (UTC)SHA256 hashStatic matchesUnpacker matches