Authenticate for API access | If you are experiencing issues with receiving data from abuse.ch platforms via API, please ensure your requests are authenticated. ➡️ Read here for more info

YARAify Search

321'559

YARA scans
(past 24 hours)

22'576

YARA rules deployed
 

139'255

Megabytes of data scanned
(past 24 hours)

You can search the YARAify database below. Before you start, you may want to have a look at the search syntax.

Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • yara:MALWARE_Win_Zegost ( run)
  • clamav:Win.Dropper.Gh0stRAT-9789290-0 ( run)
  • imphash:1b365823829e2ac9bfb0aa5d328240a4 ( run)
  • tlsh:T140551236C8E05951CAEFD73315186AF983182477CCC9E5BB0E6B36D62CB6431A36B06D ( run)
  • telfhash:t1dd211d716b2195266ea0cd9088eca7b2512c97072349df33cf31849c24140aeea3ac4f ( run)
  • gimphash:a081e2fab5999d99ed6be718af55e93df171d14bc83c7ca5fdc0907edba0d338 ( run)
  • dhash_icon:92264e9e361ccdee ( run)
  • md5:bf130acead582841f356719dd6d29e98 ( run)
  • sha1:a0a4863bea2e364a5c5281a4f1a8b1361607b27a ( run)
  • sha256:cf6be26cbfc87fb85d345f97edd03ddc1f157c57fa3cd60da23a8cba71615842 ( run)
  • sha3_384:3d4ca8658c07062218a667fe4570f0de978ed6fd311a258124a0a81c3bb21f8e11920965694bbc8db186fb3527dfa6b4 ( run)
First seen (UTC)SHA256 hashStatic matchesUnpacker matches