Authenticate for API access | If you are experiencing issues with receiving data from abuse.ch platforms via API, please ensure your requests are authenticated. ➡️ Read here for more info

YARAify Search

442'920

YARA scans
(past 24 hours)

22'508

YARA rules deployed
 

167'390

Megabytes of data scanned
(past 24 hours)

You can search the YARAify database below. Before you start, you may want to have a look at the search syntax.

Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • yara:MALWARE_Win_Zegost ( run)
  • clamav:Win.Dropper.Gh0stRAT-9789290-0 ( run)
  • imphash:1b365823829e2ac9bfb0aa5d328240a4 ( run)
  • tlsh:T140551236C8E05951CAEFD73315186AF983182477CCC9E5BB0E6B36D62CB6431A36B06D ( run)
  • telfhash:t1dd211d716b2195266ea0cd9088eca7b2512c97072349df33cf31849c24140aeea3ac4f ( run)
  • gimphash:a081e2fab5999d99ed6be718af55e93df171d14bc83c7ca5fdc0907edba0d338 ( run)
  • dhash_icon:92264e9e361ccdee ( run)
  • md5:bf130acead582841f356719dd6d29e98 ( run)
  • sha1:a0a4863bea2e364a5c5281a4f1a8b1361607b27a ( run)
  • sha256:cf6be26cbfc87fb85d345f97edd03ddc1f157c57fa3cd60da23a8cba71615842 ( run)
  • sha3_384:3d4ca8658c07062218a667fe4570f0de978ed6fd311a258124a0a81c3bb21f8e11920965694bbc8db186fb3527dfa6b4 ( run)
First seen (UTC)SHA256 hashStatic matchesUnpacker matches