NEW | Hunt across all abuse.ch platforms with one simple query - discover if an IPv4 address, domain, URL or file hash has been identified on any platform from a centralized search tool. Test it out here hunting.abuse.ch - and happy hunting 🔍

YARAify Search

358'590

YARA scans
(past 24 hours)

22'152

YARA rules deployed
 

314'756

Megabytes of data scanned
(past 24 hours)

You can search the YARAify database below. Before you start, you may want to have a look at the search syntax.

Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • yara:MALWARE_Win_Zegost ( run)
  • clamav:Win.Dropper.Gh0stRAT-9789290-0 ( run)
  • imphash:1b365823829e2ac9bfb0aa5d328240a4 ( run)
  • tlsh:T140551236C8E05951CAEFD73315186AF983182477CCC9E5BB0E6B36D62CB6431A36B06D ( run)
  • telfhash:t1dd211d716b2195266ea0cd9088eca7b2512c97072349df33cf31849c24140aeea3ac4f ( run)
  • gimphash:a081e2fab5999d99ed6be718af55e93df171d14bc83c7ca5fdc0907edba0d338 ( run)
  • dhash_icon:92264e9e361ccdee ( run)
  • md5:bf130acead582841f356719dd6d29e98 ( run)
  • sha1:a0a4863bea2e364a5c5281a4f1a8b1361607b27a ( run)
  • sha256:cf6be26cbfc87fb85d345f97edd03ddc1f157c57fa3cd60da23a8cba71615842 ( run)
  • sha3_384:3d4ca8658c07062218a667fe4570f0de978ed6fd311a258124a0a81c3bb21f8e11920965694bbc8db186fb3527dfa6b4 ( run)
First seen (UTC)SHA256 hashStatic matchesUnpacker matches