Statistics

YARAify produces detailed statistics on files scanned, including associated detections - find the available statistics below.

You can also access Spamhaus's Malware Digest report, based on YARAify data:

File Scans

The chart below shows the number of file scans conducted by YARAify over the past 30 days.

Data Scanned

This chart shows the amount of data scanned in Megabytes over the past 30 days.

API requests

The illustration below documents the number of API requests over the past 30 days.

Most matching YARA rules

YARA rules that matched most on files scanned on YARAify in the past 14 days.

Task countYARA RuleAuthorLast match
415'178Sus_Obf_Enc_Spoof_Hide_PEXiAnzheng2025-02-21
243'067golang_bin_JCorn_CSC846Justin Cornwell2025-02-21
159'488DebuggerCheck__API2025-02-21
132'943SHA512_Constantsphoul (@phoul)2025-02-21
113'881malware_shellcode_hashJPCERT/CC Incident Response Group2025-02-21
113'474pe_detect_tls_callbacks2025-02-21
80'731UPXV200V290MarkusOberhumerLaszloMolnarJohnReisermalware-lu2025-02-21
72'074vmdetectnex2025-02-21
69'339NETmalware-lu2025-02-21
64'879win_m0yv_autoFelix Bilstein2025-02-21
63'601UPXv20MarkusLaszloReisermalware-lu2025-02-21
56'583MD5_Constantsphoul (@phoul)2025-02-21
48'431Windows_Trojan_M0yv_92f66467Elastic Security2025-02-21
43'484SEH__vba2025-02-21
42'069DebuggerException__SetConsoleCtrl2025-02-21

ClamAV Most matching ClamAV signature

ClamAV signature that matched most on files scanned on YARAify in the past 14 days.

Task countClamAV SignatureLast match
68'521PUA.Win.Packer.Lccwin-22025-02-21
49'488Win.Trojan.Obfus-382025-02-21
38'904Win.Trojan.Padodor-9877164-02025-02-21
24'212PUA.Win.Packer.AcprotectUltraprotect-12025-02-21
23'768Win.Malware.Qukart-6838239-02025-02-21
22'943Win.Trojan.Padodor-10016488-02025-02-21
22'941Win.Trojan.Qukart-6874817-02025-02-21
20'263Win.Malware.Galg-10004505-02025-02-21
17'461Win.Trojan.Packz-10033592-02025-02-21
16'276Win.Packed.Generickdz-10026646-02025-02-21
16'240Win.Packed.Generickdz-10022900-02025-02-21
16'016SecuriteInfo.com.Win32.Expiro-3.UNOFFICIAL2025-02-20
15'782Win.Proxy.Qukart-10014178-02025-02-21
15'344SecuriteInfo.com.PUA.JS.Obfus-2525.UNOFFICIAL2025-02-21
14'937Win.Packed.Generickdz-10020556-02025-02-21

Most seen files

Most seen files scanned by YARAify in the past 14 days.

Task countSHA256 hashLast seen
3216d0f8f712df865902de1bba99176ca75a4a6e3f020ab64f6d48ed9c8b614f95e2025-01-04
1873d603a8d74d903ffd330365b4d4a1eadf197e88b0a88af21103c2aeb91cb40972025-01-04
179c71bdfdfcb88073f7099e3993eba28ee5badc29a718d45700df3f6d9f7f21e5c2025-01-04
1745f6e9dc4ed23e55b41186ad60d2888784a3ebdea261e6e52b938fccabf64ab9e2025-01-20
1496246a5f00d0bbbe935d6736244e1d125f9fc56575cb83f6b4edcc08212eb70d52025-01-04
1483b997889cad45370efd938583ba9f1bb3f973fba28691e9e0267da07fc8019d82025-01-04
146d2bc4bc0065f883cf10a631a677d2f440fa4baab665280c8dc2126ae90a743ea2025-01-03
1453b6ad9aa8c2f25c2e8b76f22eb135dc9e6affd8b1c0b63f1a81b01432544005e2024-12-19
1421368a51d418bd575c09100fae6ca58e8fd235dd4791fd4002c47b9bdd86113a22025-01-04
139a4ec9fd2488f0b1734317beb74e1524838d0f7c907eb4e452d7cf40c03c7e5dd2021-07-08
1382241e73445960ca5832431bfc64b6600535c044d3c6dadffbf154ced792304442025-01-04
13864646a2095c8f73904f0490053e815841379c02f19ee4374a2209c9a080548152025-01-05
1375ea4d94c695189639e9ab7afe8d76d231030921fbfdd95e1941c7c0a05fb8f032022-02-07
13653c22863323c0f5ff94f4ae86df27a51db4eae7232cc38333346ee8be9df5aa62022-02-07
13623c2d2b0c6cec3e69cb07f942c9e56f2087aeb24015be25823897faafc4708ae2022-02-07

Top dhash icon

Top dhash icon observed on files scanned by YARAify in the past 14 days.

Task countdhash iconLast seen
10'9391003873d31213f102025-02-20
8'46200ccc4d0c4fc7c002025-02-20
8'17704ccfee2ece4a4842025-02-20
7'090526e32661e3a2a102025-02-20
3'504e0f0e48c8ca4c0e02025-02-20
3'054b298acbab2ca7a722025-02-20
2'358aae2f3e38383b6292025-02-20
2'32469ccd4d49696cc712025-02-20
2'12701ccc4d0c4f47c022025-02-20
2'0167ce4e4e4647068612025-02-20
1'75660dc862226869ce12025-02-20
1'7499288ce8c2a868f922025-02-20
1'5771003873db9313e102025-02-20
1'5545050d270cccc82ae2025-02-20
1'54304c988cce6fc70122025-02-20

Top imphash

Top imphash observed on files scanned by YARAify in the past 14 days.

Task countimphashLast seen
37'80546f03ef2495b21d7ad3e8d36dc03315d2025-02-20
25'42391f4b88d25daa33c7443253d9beb1bb32025-02-20
21'764f34d5f2d4577ed6d9ceec516c1f5a7442025-02-20
19'58488478c1f74f94f7e1e9654193a1e02b32025-02-20
8'38912a30b523ac71a3cbe9145c89400dd7f2025-02-20
7'6470bdef4d92a94790d7d279561a490c5bb2025-02-20
6'7983f8d79e42b0b7cecf379b1ddce4e422a2025-02-20
6'609f0070935b15a909b9dc00be7997e61122025-02-20
6'51087914047e74de74a89c530e3bb19409e2025-02-20
5'952664a2b324a8857d7d4ab8815c756b5bb2025-02-20
5'8962eabe9054cad5152567f0699947a2c5b2025-02-20
4'930c9246f292a6fdc22d70e6e581898a0262025-02-20
4'4014dcbc0931c6f88874a69f966c86889d92025-02-20
4'205fd82a9d311cd35db54452f8601718c072025-02-20
3'7475271d5ce8b44dd47bc92563e275854662025-02-20

Top tlsh

Top tlsh observed on files scanned by YARAify in the past 14 days.

Task counttlshLast seen
228T1B9D4642D0327604ED089F036233FDA9A7A06ACBF5F78B775F581254EBDE15CB806A5242023-04-19
141T1CF11126B87EAFEF1E14C00B0160B8B003329C42407E2974B4AA6012ABCA18BC4C96C012021-07-07
140T192111217D7EAE9F6C44C01700B4B8A022229586C83E68A47099465BABCA16AC859AD022021-07-08
140T1B5033E9736E31000FB09BE35C654834FEF06CF59B97A9B4ED39826C72371A78629E0592022-02-07
139T16211801BC7D1ADF1C44C01700F5786041735D42453D583574E94047EFC561BC6CD6C062021-07-08
139T104942955F242C23BC0523DB84A4989F55672DD303C32E0EB77DA1E1F6B75EA26F286062023-10-26
137T1BCE47D21F1C18079E4F5157096FF7A5B246C69A64B2838E3E7987EC928741F27A3C2C72021-07-08
137T1FBE47D21F1C18079E4F5157096FF7A5B246C69A64B2838E3E7987EC928741F27A3C2C72021-07-08
137T138118CABCBE6ACF1C80C10B4070B8D013674883443E1C3170EA5007E7CA22FCD8B6E022021-07-09
136T1CCE2F87B94C24337C001EFB60B95C9AEBB736D306564C0E32BD42B1F892B9687D5D4692021-07-09
135T1D0748D21F1C18079E4F5157096FF7A5B246C69B64B2838E7E7986EC928740F27A3C2C72021-07-08
135T1BD812B4525A230CAC056C270ED52C158ABD9BC37AF44D3BBF1B90FDD83112451CC1B0B2022-02-07
135T1C2747D21F1C18079E4F5157096FF7A5B246C69A64B2838E3E7987EC928741F27A3C2C72021-07-08
134T160030B9736E31000FB09BE32E554C24FEF06CF59B976974ED39826C72350A78662E45B2022-02-07
134T1C8E052F688E090AC080023A82BDF2CA5437B03BD00202A0BF20BA04D022DF72E30A3F02021-07-07

Top telfhash

Top telfhash observed on files scanned by YARAify in the past 14 days.

Task counttelfhashLast seen
379t126f09018093456e197116ec8673dff7ad56220ef6a055e378f00fda79b699426e10c0c2025-02-20
36t13611d04270b6891d2bb659245cbc42b5165536236381be75bf0ec5c45537002ba79e8b2025-02-18
33t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aacd2025-02-20
20t13711d056b4fa85685ff218249dbc57b41592652332627e70af4dc5c4983b002f935fcf2025-02-18
20t1d211020260b689282bb259205cbc42f1165526233341be75bf0ec5c4993b002aa78e8b2025-02-18
20t1fe11104270b6891c2bb259245cbc42b0165532232381be74bf0ec5c05937002ba79e8b2025-02-18
19t1d1c08c458b20229c7d812dd29e8cf53374e8f563097a109cfe7a9083893c4b3a20c92c2025-02-16
18t1c8e02600ac659a5888d79a749d9d07b499012213506a8b10cf10d6f4c83f458e308e5a2025-02-19
18t1e1d0a7d19e681c48e9f4805dc4ef61679340b5d17f1494877df16d029a320c9703110e2025-02-20
17t178310071567851269aa1ec64d9ed97b2652ac7171340ff32df26c0cc281a449f62ac0f2025-02-20
17t173111069cfd8159e2fe08244e15db44e9a74726d1f6735925d756a8fd1428e3306cc202025-02-20
17t17951bbb0399939d8a2fbfb37730be9a45cb50a6015e172d1ceb769e2de417840cb14632025-02-20
17t10751b1fa6dba08ecfbd0a804c75e5bd33669ca7b153025b0406398b532f79954475c3a2025-02-20
16t1564165181e7817b063356c4e159cef3b96a320db7e176c378e51e86aab699835d10c0c2025-02-20
16t12e11401a8f942e4eaff4000e869ea21b547075592f2b78538c2a752b93831c2f06dc532025-02-20

File Scans

The chart below shows the number of file scans conducted by YARAify over the past 12 months.

Data Scanned

This chart shows the amount of data scanned in Megabytes over the past past 12 months.

API requests

The illustration below documents the number of API requests over the past past 12 months.

Most matching YARA rules

YARA rules that matched most on files scanned on YARAify in the past 12 months.

Task countYARA RuleAuthorLast match
18'164'499maldoc_getEIP_method_1Didier Stevens (https://DidierStevens.com)2025-02-15
18'062'535meth_get_eipWilli Ballenthin2025-02-15
16'262'410QbotStuffanonymous2024-08-15
10'498'563win_berbew_strings_dec_2023Matthew @ Embee_Research2025-02-15
5'026'766SEH__vba2025-02-21
4'956'575DebuggerCheck__API2025-02-21
4'609'620Detect_APT29_WINELOADER_Backdoordaniyyell2024-09-24
4'521'363Sus_Obf_Enc_Spoof_Hide_PEXiAnzheng2025-02-21
2'328'583RansomPyShield_AntiransomwareXiAnzheng2025-01-04
2'093'279UPXV200V290MarkusOberhumerLaszloMolnarJohnReisermalware-lu2025-02-21
2'059'729SHA512_Constantsphoul (@phoul)2025-02-21
2'005'022NETmalware-lu2025-02-21
1'994'463malware_shellcode_hashJPCERT/CC Incident Response Group2025-02-21
1'755'870UPXv20MarkusLaszloReisermalware-lu2025-02-21
1'683'495pe_detect_tls_callbacks2025-02-21

ClamAV Most matching ClamAV signature

ClamAV signature that matched most on files scanned on YARAify in the past 12 Mmonths.

Task countClamAV SignatureLast match
38'589'516PUA.Win.Packer.Lccwin-22025-02-20
25'968'640Win.Trojan.Qukart-6874817-02025-02-20
25'890'447Win.Trojan.Padodor-10016488-02025-02-20
25'719'496Win.Trojan.Obfus-382025-02-20
20'608'319Win.Malware.Qukart-6838239-02025-02-20
6'322'424SecuriteInfo.com.BackDoor.HangUp.43874.UNOFFICIAL2025-02-20
5'681'951Win.Trojan.Berbew-9845290-12025-02-20
4'409'865Win.Trojan.Padodor-9877164-02025-02-20
3'879'139Win.Malware.Midie-6847981-02025-02-19
3'656'527Win.Dropper.Ajku-10014126-02025-02-20
3'539'150Win.Trojan.Razy-10016933-02025-02-20
3'276'687Win.Trojan.Barys-10005825-02025-02-20
3'247'813Win.Malware.Generickdz-10004857-02025-02-20
3'030'583Win.Malware.Midie-6848630-02025-02-20
3'002'071Win.Malware.Midie-6847894-02025-02-20

Most seen files

Most seen files scanned by YARAify in the past 12 months.

Task countSHA256 hashLast seen
8'831e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b8552021-07-12
3'347a4ec9fd2488f0b1734317beb74e1524838d0f7c907eb4e452d7cf40c03c7e5dd2021-07-08
3'339e0af7f483f4965dca90eb5921ae004a7e41593b39284a63af97a9105b96718e72022-01-06
3'337b3986e04464339cec16157cf8c8bffec3a8a8c5eae57997974d45f5369fa16552021-07-07
3'33039e48a3fc7e67968ff5d6e3cf8e12a7256af93ccabbce4da20d28c79237d95e82022-01-06
3'30423c2d2b0c6cec3e69cb07f942c9e56f2087aeb24015be25823897faafc4708ae2022-02-07
3'3011115b6c913a207b9d81f8482613b2a9c2929ca81399861d2d2c47422e244060d2022-02-07
3'29169c88b4d5ea84620d1b762d5119fe9293c34e68268e7006cb503b865e963b2512021-07-09
3'277ebd6320e24d47c0d638749a149f14f4c94b1c98afa228dba1f48eea19a2c72572021-07-09
3'2555ea4d94c695189639e9ab7afe8d76d231030921fbfdd95e1941c7c0a05fb8f032022-02-07
3'24887479e089e6852958dab4026e07bc01ed1f31af423b1d26db462ef7493a537f12022-02-08
3'21053c22863323c0f5ff94f4ae86df27a51db4eae7232cc38333346ee8be9df5aa62022-02-07
3'178e9926dc2559ae45dfffbe4628710240c6ad0c56073bd8f8e1a10bed2b29468e92021-07-08
3'17832996a04eeead4de0813ca803033429fd38e0aa4ab8d603508e1d2c6bd38aba72022-02-08
3'1774d3a1915ae5f6353bae216494095c50ea2a67dca5db49bd7004476e1d92bb2ff2021-07-08

Top dhash icon

Top dhash icon observed on files scanned by YARAify in the past 12 months.

Task countdhash iconLast seen
2'171'59418b1b1b17068c8802025-02-20
747'87358b1b1b17068c8802025-02-20
626'728d8d0d4d8ececece42025-02-19
461'8771003873db9313e102025-02-20
280'3091003873d31213f102025-02-20
274'44169ccd4d49696cc712025-02-20
128'774818da080a0a0a0a22025-02-20
126'06400ccc4d0c4fc7c002025-02-20
115'29571e8d4968ecc68f92025-02-20
105'471526e32661e3a2a102025-02-20
101'90104ccfee2ece4a4842025-02-20
99'4389919aca682a881a92025-02-20
71'1245ab3a5b332c482a02025-02-20
58'795b298acbab2ca7a722025-02-20
46'84219b1b1b17068c8802025-02-20

Top imphash

Top imphash observed on files scanned by YARAify in the past 12 months.

Task countimphashLast seen
12'748'8926db997463de98ce64bf5b6b8b0f77a452025-02-14
8'328'4504dcbc0931c6f88874a69f966c86889d92025-02-19
6'074'67046f03ef2495b21d7ad3e8d36dc03315d2025-02-19
5'495'540c9246f292a6fdc22d70e6e581898a0262025-02-19
3'216'9555d6cad172c5535e4b6b6bbd2465716212025-02-19
1'751'962e4742a62fda2e64b586a5b84efe3f0402024-12-19
793'24687914047e74de74a89c530e3bb19409e2025-02-19
732'7933f8d79e42b0b7cecf379b1ddce4e422a2025-02-20
619'21491f4b88d25daa33c7443253d9beb1bb32025-02-20
376'894c06ddfbe3366daddf0cfd3e63c1b53902025-02-19
376'276f34d5f2d4577ed6d9ceec516c1f5a7442025-02-20
298'0152c2ad1dd2c57d1bd5795167a7236b0452025-02-19
259'0341a611a7df1f3828b0157c4725145a7212025-02-17
231'480dae02f32a21e03ce65412f6e56942daa2025-02-20
226'099a3df475500e5e30f4680b397c2ee13f12025-02-20

Top tlsh

Top tlsh observed on files scanned by YARAify in the past 14 months.

Task counttlshLast seen
3'346T16211801BC7D1ADF1C44C01700F5786041735D42453D583574E94047EFC561BC6CD6C062021-07-08
3'345T10016DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
3'342T1C8E052F688E090AC080023A82BDF2CA5437B03BD00202A0BF20BA04D022DF72E30A3F02021-07-07
3'336T1EF16DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
3'308T1B5033E9736E31000FB09BE35C654834FEF06CF59B97A9B4ED39826C72371A78629E0592022-02-07
3'297T153819E61842314C4F557CFF0D61BD82AAFA5334684584E1123E0606A4BCF60427041E32022-02-07
3'292T138118CABCBE6ACF1C80C10B4070B8D013674883443E1C3170EA5007E7CA22FCD8B6E022021-07-09
3'277T1CCE2F87B94C24337C001EFB60B95C9AEBB736D306564C0E32BD42B1F892B9687D5D4692021-07-09
3'252T160030B9736E31000FB09BE32E554C24FEF06CF59B976974ED39826C72350A78662E45B2022-02-07
3'242T1D7819E61842314C4F557CEF4D51BE869BFA5734550584E1423E0705A4BCBA1427551A32022-02-08
3'207T1BD812B4525A230CAC056C270ED52C158ABD9BC37AF44D3BBF1B90FDD83112451CC1B0B2022-02-07
3'182T13A03389736E31100FB08FE32C554838FEF86CF69B976974AD79826C72350A78621E45E2022-02-08
3'180T1FBE47D21F1C18079E4F5157096FF7A5B246C69A64B2838E3E7987EC928741F27A3C2C72021-07-08
3'179T1BCE47D21F1C18079E4F5157096FF7A5B246C69A64B2838E3E7987EC928741F27A3C2C72021-07-08
3'167T1A58162A0432FB74ADC5680B151DEA0E16667707204E5CA0551C916ADDB829F0EF74C332022-02-08

Top telfhash

Top telfhash observed on files scanned by YARAify in the past 12 months.

Task counttelfhashLast seen
886t126f09018093456e197116ec8673dff7ad56220ef6a055e378f00fda79b699426e10c0c2025-02-20
470t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aacd2025-02-20
360t157110e13a0b9ca282bf348249dbc07f005502b23a782be71bf0ac5c49437002a875d9b2025-02-20
358t13611d04270b6891d2bb659245cbc42b5165536236381be75bf0ec5c45537002ba79e8b2025-02-18
287t18c3112a19679512a5da1ec68edda57b2501a56172350bf33df21c0cc380a44ff527c0f2025-02-10
282t1ad11e113a0b9ca286bf758349dbc47f105512b23b746be71bf0ac5c49537002b975d9b2025-02-20
258t1d9e0c240adb89a1e9ce35bb8ddcd07b1a1116253a4270b10cf58e6e0c83f988a60de6d2025-02-12
244t1bc3111b19679512a59a1ec68edde5bb2511a96172340fe33ee21c0cc380a44fe52bc0f2025-02-15
230t17011f01361b6ca1d2bb659348dfc47f016512b236282bf71bf0dc5c88537042b93ad9b2025-02-03
227t195317722553546142fb3d928acfd56b315222b2363587f716f26c48c49370e2e93dd4f2025-01-30
224t1d211020260b689282bb259205cbc42f1165526233341be75bf0ec5c4993b002aa78e8b2025-02-18
221t15c2131705336a115aea1cc64dcee87f2111996232744af73ee36c0cc68060cae52bc0f2025-02-12
219t1fe11104270b6891c2bb259245cbc42b0165532232381be74bf0ec5c05937002ba79e8b2025-02-18
216t171217622513542182fb3d928acbd567315222b2363597f716f26c4cc49370e2e93ad4f2025-01-30
183t119e07d00fc75875c5cd79a749ddd07b49900220250574b00cf10d6f0c83f444e308d5e2025-02-05