🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

Statistics

YARAify produces detailed statistics on files scanned, including associated detections - find the available statistics below.

You can also access Spamhaus's Malware Digest report, based on YARAify data:

File Scans

The chart below shows the number of file scans conducted by YARAify over the past 30 days.

Data Scanned

This chart shows the amount of data scanned in Megabytes over the past 30 days.

API requests

The illustration below documents the number of API requests over the past 30 days.

Most matching YARA rules

YARA rules that matched most on files scanned on YARAify in the past 14 days.

Task countYARA RuleAuthorLast match
238'750VECT_RansomwareMustafa Bakhit2026-10-29
177'814golang_bin_JCorn_CSC846Justin Cornwell2026-10-29
124'536CP_Script_Inject_DetectorDiegoAnalytics2026-10-29
121'250DebuggerCheck__API2026-10-29
88'882TH_AntiVM_MassHunt_Win_Malware_2026_CYFARECYFARE2026-10-29
86'198pe_detect_tls_callbacks2026-10-29
73'538FreddyBearDropperDwarozh Hoshiar2026-10-29
66'488UPXkevoreilly2026-10-29
65'272DetectEncryptedVariantsZinyth2026-10-29
64'311DebuggerException__SetConsoleCtrl2026-10-29
63'531UPXV200V290MarkusOberhumerLaszloMolnarJohnReisermalware-lu2026-10-29
56'519ThreadControl__Context2026-10-29
56'273classifiedclassified2026-10-29
55'518WIN_Malware_Unknown_ForgeAuto_37b4704bMarjoriefort2026-10-29
54'984telebot_frameworkvietdx.mb2026-10-29

ClamAV Most matching ClamAV signature

ClamAV signature that matched most on files scanned on YARAify in the past 14 days.

Task countClamAV SignatureLast match
44'571SecuriteInfo.com.VBS.Obfus-141.UNOFFICIAL2026-10-28
15'548SecuriteInfo.com.not-a-virus.HEUR.RiskTool.Multi.WinDivert.gen.25597.12273.UNOFFICIAL2026-10-29
12'932Win.Malware.Genpack-6989317-02026-10-29
11'214Win.Malware.Vilsel-6804257-02026-10-29
9'908MiscreantPunch.SingleXOR.EXE.5.UNOFFICIAL2026-10-29
9'720Win.Worm.Socks-102026-10-29
9'469Win.Trojan.Vilsel-46212026-10-29
9'464Win.Trojan.Vilsel-46222026-10-29
9'110SecuriteInfo.com.Trojan.DownLoader.56609.7966.14826.UNOFFICIAL2026-10-29
9'094YARA.DITEKSHEN_MALWARE_Win_Blackmoon.UNOFFICIAL2026-10-29
8'527SecuriteInfo.com.Generic-EXE.UNOFFICIAL2026-10-29
8'458Win.Dropper.Razy-7605528-02026-10-29
6'664Win.Malware.F50e02b-10027316-02026-10-29
6'518SecuriteInfo.com.Trojan.DownLoader9.42839-1.UNOFFICIAL2026-10-28
6'471TwinWave.EvilZip.OnAndOn.20221219.UNOFFICIAL2026-10-29

Most seen files

Most seen files scanned by YARAify in the past 14 days.

Task countSHA256 hashLast seen
50199476d2fd1013e6902eb0c79e9ae873e8715887b958b3221daccee8919d468e92026-10-26
39112324cb3a62732385cf5e8560a3c8101625fba9daab8f3857bc0ed5025f6680e2026-10-23
363acb38f8ad036f246caa281820acc989728cdcf12a86598f3eb815fc188b50d3e2026-10-26
358fa60c32ca3587ece86fcca558806a7b82c322068f88dd5310af55e8cb40b941a2026-10-20
357ea2054efa279dc4677eb1412fae65910476e48ecfef05d88e93929444305848b2026-10-20
283e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b8552021-07-12
1770a0b3d7c1be53671707153d5c0d24f966fe5952892836f0fd02c5fbf3eff660f2026-10-25
17185bfe327c64e66f71f7da0a1b0d84e6d46ce422610ae08d265be09c59ddea5142026-10-20
131ebd6320e24d47c0d638749a149f14f4c94b1c98afa228dba1f48eea19a2c72572021-07-09
13169c88b4d5ea84620d1b762d5119fe9293c34e68268e7006cb503b865e963b2512021-07-09
127b09cffacbe4e93468d374901e1ee8ac76df5791ab157054ac412fbc0358c0ff02026-10-25
127e0af7f483f4965dca90eb5921ae004a7e41593b39284a63af97a9105b96718e72022-01-06
12739e48a3fc7e67968ff5d6e3cf8e12a7256af93ccabbce4da20d28c79237d95e82022-01-06
126b3986e04464339cec16157cf8c8bffec3a8a8c5eae57997974d45f5369fa16552021-07-07
125273322d356cf81182711d7995b92a5b6d0e70aee45a63a351efe8113cba6f87c2026-08-22

Top dhash icon

Top dhash icon observed on files scanned by YARAify in the past 14 days.

Task countdhash iconLast seen
7'26300ccc4d0c4fc7c002026-10-29
6'48202c0b0746c60b0182026-10-28
4'82500ccc4d0c4fcfc452026-10-29
4'4815f15cec0c4fc7c022026-10-29
3'52719f8e0e8e8f0f0f02026-10-28
3'27404ccfee2ece4a4842026-10-29
2'82106336c9286cc71172026-10-29
2'26792e0b496a6cada722026-10-29
1'852818da080a0a0a0a22026-10-29
1'4121003873d31213f102026-10-29
1'25780cc86a2a286cc7e2026-10-28
1'16295ccc4d0c4fc7c002026-10-29
1'15800928e8e8686b8002026-10-29
9105050d270cccc82ae2026-10-28
871d0e082a2a4bcb8bc2026-10-28

Top imphash

Top imphash observed on files scanned by YARAify in the past 14 days.

Task countimphashLast seen
13'682f34d5f2d4577ed6d9ceec516c1f5a7442026-10-24
11'37376515d04dff07b5b4a25c41ca10134842026-10-23
9'855dae02f32a21e03ce65412f6e56942daa2026-10-24
5'0579445e2cedbd7dbfed0146212daf6af2b2026-10-22
4'72491f4b88d25daa33c7443253d9beb1bb32026-10-24
4'182a12d186f65c99f872323a61923ce70d82026-10-24
3'5191f75ee5de8ac0c77c6e43508555114fe2026-10-24
3'273f481ea8169d367d8b0e94d0bf02da2202026-10-24
3'22208b656407b8d307979dc72c3fcc683a82026-10-24
3'1495d6cad172c5535e4b6b6bbd2465716212026-10-24
2'8065271d5ce8b44dd47bc92563e275854662026-10-24
2'6870207cb676f5843dc4a3f86046e8fcef12026-10-23
2'6041639b1e17656fed4f63bac94cbb79cec2026-10-24
2'4852dd2758f0793bdb29ce229a2432eb81b2026-10-24
2'279030b13d3700df42f42a0d34867dbfec42026-10-24

Top tlsh

Top tlsh observed on files scanned by YARAify in the past 14 days.

Task counttlshLast seen
174T190C46C2AA4604176E4F5213121FE7A672CBD2E6443ED24D377A05E8D6DA41F3B2381EF2021-11-18
136T1CCE2F87B94C24337C001EFB60B95C9AEBB736D306564C0E32BD42B1F892B9687D5D4692021-07-09
136T138118CABCBE6ACF1C80C10B4070B8D013674883443E1C3170EA5007E7CA22FCD8B6E022021-07-09
134T1C5D66B68E683D8F6DC4207754087BAAF22B8A770C779CE27DA046C58DB37E9645373062025-07-20
128T10016DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
127T1EF16DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
126T19A931A2AB183433BC1017EB54B5489FAB772AD206832C0F773D92B1F897AD957F1851A2021-07-09
125T176E48D61F185C075E0F116B0A6FE7A5B146C2975471D38E3EB98BEC929740F27A3C28B2021-08-11
125T133E48D51F185C076E0F116B0A6FE7A5B146C2975471D38E3EB98BEC929740F27A3C28B2021-08-11
122T1AE93296AB0C3433BC141BFB54B4449AAB722E8203961C0F773D82E5FCA6B9957E1C55E2021-07-12
122T1BCE47D21F1C18079E4F5157096FF7A5B246C69A64B2838E3E7987EC928741F27A3C2C72021-07-08
122T1C8E052F688E090AC080023A82BDF2CA5437B03BD00202A0BF20BA04D022DF72E30A3F02021-07-07
122T1FBE47D21F1C18079E4F5157096FF7A5B246C69A64B2838E3E7987EC928741F27A3C2C72021-07-08
118T153819E61842314C4F557CFF0D61BD82AAFA5334684584E1123E0606A4BCF60427041E32022-02-07
116T1D7819E61842314C4F557CEF4D51BE869BFA5734550584E1423E0705A4BCBA1427551A32022-02-08

Top telfhash

Top telfhash observed on files scanned by YARAify in the past 14 days.

Task counttelfhashLast seen
245t1b8d1be700bf635b562dbda20b323f4798d3218ba64f435f466227d88ef85e814c6e4272026-10-27
237t1a1a012171044c50d46274f044ca5020100421833e8593d561f0caa00802100002188da2026-10-01
143t171d1af700bf635b562dbca20f323f4758d3218ba64f435b466227d98ef85e814c6e8672026-10-21
105t1d3e16b754ff934b862d6ca24b352f0769a33142b66ec35f52612ad98ef40fc04c6682b2026-09-30
98t193b012071484c50c45779b514ca5034910419833e85b3e962f0cfa40402100803488ea2026-09-30
97t191b09b4d49774538d5516739d44c0012b50be93391d907104f60d675c53852f731d75a2026-10-27
75t10ad1bb700bf635b061dbca20f343f1754d3214ba65f439e42662be88ef95e414c6e52b2026-10-29
65t103114918893813f087b11d9d6becfe72e0a170eb4a255e378e50f9a99a6dd019e00c2c2026-10-22
52t147110448a93b0d59bde21514cca81ba4d60bc555bcb14b21df5ccbc085e941ea209f1f2026-10-18
50t127814144e83c46dddea31e699cb86fe31947e12a23916e1aff29cdc8085e418f115c4f2026-10-27
47t159b02b025470414c8ff221380c24cc831202c1a3c9415f608d40f740ca3f08d804cf4d2026-10-25
46t14aa002d159ce4addc1613c5dc02369144006974f399a1f1343a18b79fa8de2033c2af52026-10-24
44t1ac310e755b22a1166961dd64d9fe87b1a51983131784ff33df2688cc240904ee72bc5f2026-10-27
42t19811714968380ae5a4f16e5088702456c657d53dba504704ff35ded24fee40df222e4f2026-10-20
41t1f4311e755b22a1166960dd68ddfe87b1a51a83131784ff33ef2688cc240a04ee72bc4f2026-10-26

File Scans

The chart below shows the number of file scans conducted by YARAify over the past 12 months.

Data Scanned

This chart shows the amount of data scanned in Megabytes over the past past 12 months.

API requests

The illustration below documents the number of API requests over the past past 12 months.

Most matching YARA rules

YARA rules that matched most on files scanned on YARAify in the past 12 months.

Task countYARA RuleAuthorLast match
3'421'709VECT_RansomwareMustafa Bakhit2026-10-29
3'268'175golang_bin_JCorn_CSC846Justin Cornwell2026-10-29
3'163'329SEH__vectored2026-10-29
2'780'572meth_stackstringsWilli Ballenthin2026-10-29
2'533'539DebuggerCheck__API2026-10-29
2'492'470Windows_Ransomware_Azov_e1ef131eElastic Security2026-10-28
2'421'691vmdetectnex2026-10-29
2'231'753CP_Script_Inject_DetectorDiegoAnalytics2026-10-29
1'821'335NETmalware-lu2026-10-29
1'727'150FreddyBearDropperDwarozh Hoshiar2026-10-29
1'401'411pe_detect_tls_callbacks2026-10-29
1'374'137DetectEncryptedVariantsZinyth2026-10-29
1'254'973Sus_CMD_Powershell_UsageXiAnzheng2026-10-29
1'116'784TH_AntiVM_MassHunt_Win_Malware_2026_CYFARECYFARE2026-10-29
1'087'329MD5_Constantsphoul (@phoul)2026-10-29

ClamAV Most matching ClamAV signature

ClamAV signature that matched most on files scanned on YARAify in the past 12 Mmonths.

Task countClamAV SignatureLast match
745'931Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-02026-10-14
650'127Porcupine.Phishing.431944.UNOFFICIAL2026-05-11
524'794PUA.Win.Packer.Lccwin-22026-10-28
480'918SecuriteInfo.com.BackDoor.HangUp.43914.UNOFFICIAL2026-10-28
435'371Porcupine.Phishing.62637.UNOFFICIAL2026-04-16
378'088Win.Malware.Genpack-6989317-02026-10-29
366'607Win.Malware.Qukart-6838239-02026-10-28
354'198Win.Trojan.Qukart-6874817-02026-10-28
353'687Win.Trojan.Padodor-10016488-02026-10-28
349'172Win.Trojan.Obfus-382026-10-28
336'942SecuriteInfo.com.PDF.URI-55.UNOFFICIAL2026-05-12
264'617Win.Trojan.Vilsel-46212026-10-29
264'556Win.Trojan.Vilsel-46222026-10-29
260'437Win.Dropper.Razy-7605528-02026-10-29
259'340Win.Malware.Vilsel-6804257-02026-10-29

Most seen files

Most seen files scanned by YARAify in the past 12 months.

Task countSHA256 hashLast seen
37'039d6633d80c9d885fb2e8d85bf105094b748eb4c82a75ea814faec1ec1da6b96e22026-04-09
37'017313f87c13fcf1ec47c003b6acfd60e3881af03a8e9d0ed661400bd088dabb11a2026-04-09
36'9645ab7476e201c6a9a643d6f0114fd93966eb08ffbb9ea76ddcfef9cc4694107102026-04-09
36'93320ace18e5a414158e5fcff4e34b29a3da1dcfc77dc355f01acc6ed1ae1e461542026-04-09
36'870468c929e26183073565264f0fd56e2a18c94c22f6e1c25485a3d56f5af82fd6d2026-04-09
36'780cdcef808517276d7342cf23f4643608c23452b675348758471567f30e555a7742026-04-09
36'7754fde43424b313e5229483b3982a63ffbaf78270201dfe52388a260b7999d01db2026-04-09
36'701cd8085fea1e830a8f221469eb6d93a0e3d162c51f47f4541f33226a7d682af1d2026-04-09
34'2916addc1507753725aa21d168657089f8114a5b6032564a37b6c0aee7111e8fa192026-04-19
33'94841df3028defec608a8b85b9341e8cf60573c67ba719b3113ac6616c85dd3cbbb2026-04-19
24'6981d6556b831c20b7a723793e5cf912cb943007b5197fba45dc104de2f1da42b0f2026-02-14
23'857ba853ce86469cece5d3702a5adc74152d9321225ca78cc9f4b1d20314d4c43a62026-02-14
22'05395041a485c262a0769e22e559d2df1a7f5fce10891bc5857b6fcdd207729e4532026-03-29
21'796f2a66afebb5f0d3dd5bf1b531f9e35b540762bc7b1f2042e6c3b8b5623be14782026-03-29
21'753bf6cd63bf87ad6a52960cff738fe7d546768e77dcb7af947fc3f888e43f5c4ba2026-03-29

Top dhash icon

Top dhash icon observed on files scanned by YARAify in the past 12 months.

Task countdhash iconLast seen
148'70100ccc4d0c4fcfc452026-10-29
130'54392e0b496a6cada722026-10-29
121'48100ccc4d0c4fc7c002026-10-29
102'84195ccc4d0c4fc7c002026-10-29
84'54504ccfee2ece4a4842026-10-29
69'59619f8e0e8e8f0f0f02026-10-28
63'78702c0b0746c60b0182026-10-29
45'6781003873d31213f102026-10-29
43'458b6caeab2eac8e8712026-10-29
41'935818da080a0a0a0a22026-10-29
41'8769ab666b2a6b490c82026-10-29
34'2975f15cec0c4fc7c022026-10-29
30'788aebc385c4ce0e8f82026-10-29
30'683258dcbeccc71710f2026-10-29
28'20869ccd4d49696cc712026-10-29

Top imphash

Top imphash observed on files scanned by YARAify in the past 12 months.

Task countimphashLast seen
265'218f34d5f2d4577ed6d9ceec516c1f5a7442026-10-25
213'018dae02f32a21e03ce65412f6e56942daa2026-10-25
143'9673f8d79e42b0b7cecf379b1ddce4e422a2026-10-23
118'402a12d186f65c99f872323a61923ce70d82026-10-25
116'3641f75ee5de8ac0c77c6e43508555114fe2026-10-25
114'75991f4b88d25daa33c7443253d9beb1bb32026-10-25
102'966c9246f292a6fdc22d70e6e581898a0262026-10-18
78'32309d0478591d4f788cb3e5ea416c252372026-10-25
76'80276515d04dff07b5b4a25c41ca10134842026-10-23
75'0064dcbc0931c6f88874a69f966c86889d92026-10-22
69'6425271d5ce8b44dd47bc92563e275854662026-10-25
68'6783d76acaa0ea7f33b32e74149aa1f88482026-10-25
68'1519445e2cedbd7dbfed0146212daf6af2b2026-10-22
64'08688478c1f74f94f7e1e9654193a1e02b32026-10-25
60'9965d6cad172c5535e4b6b6bbd2465716212026-10-25

Top tlsh

Top tlsh observed on files scanned by YARAify in the past 14 months.

Task counttlshLast seen
20'595T10D7312EA5208D5F57C50FC66EDF570BD01DCEE01DA7791F83AEA84822A21D0A5C5ABD02025-07-05
15'575T1F35436139C199F43A068C7A8BF131E6C6F196A4DA9C676EF50634DCB3B243311C9E16E2025-10-14
3'600T1C8E052F688E090AC080023A82BDF2CA5437B03BD00202A0BF20BA04D022DF72E30A3F02021-07-07
3'596T10016DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
3'594T1EF16DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
3'538T1B5033E9736E31000FB09BE35C654834FEF06CF59B97A9B4ED39826C72371A78629E0592022-02-07
3'517T160030B9736E31000FB09BE32E554C24FEF06CF59B976974ED39826C72350A78662E45B2022-02-07
3'504T138118CABCBE6ACF1C80C10B4070B8D013674883443E1C3170EA5007E7CA22FCD8B6E022021-07-09
3'476T1BD812B4525A230CAC056C270ED52C158ABD9BC37AF44D3BBF1B90FDD83112451CC1B0B2022-02-07
3'463T13A03389736E31100FB08FE32C554838FEF86CF69B976974AD79826C72350A78621E45E2022-02-08
3'460T153819E61842314C4F557CFF0D61BD82AAFA5334684584E1123E0606A4BCF60427041E32022-02-07
3'452T1CCE2F87B94C24337C001EFB60B95C9AEBB736D306564C0E32BD42B1F892B9687D5D4692021-07-09
3'430T1D7819E61842314C4F557CEF4D51BE869BFA5734550584E1423E0705A4BCBA1427551A32022-02-08
3'366T1A58162A0432FB74ADC5680B151DEA0E16667707204E5CA0551C916ADDB829F0EF74C332022-02-08
3'366T10E8132A0832FBA4ADC96847151DEE1E16667307604E5C50161DA26DEDB83AE4EF78C332022-02-08

Top telfhash

Top telfhash observed on files scanned by YARAify in the past 12 months.

Task counttelfhashLast seen
3'879t113a002171895c61d573b9f189cea074610831c33fc6d3d6a5e5cdf558525505075ccaf2026-10-14
1'844t1a1a012171044c50d46274f044ca5020100421833e8593d561f0caa00802100002188da2026-10-01
925t149a012020880810c0177ab114c95034910414833e81a3d551e0cda400410008034886a2026-10-14
619t193b012071484c50c45779b514ca5034910419833e85b3e962f0cfa40402100803488ea2026-09-30
597t1f6b00121eb906524a6b1da0a6a533e48b46a31e5b0756164299f6101b61c64526d30042026-10-27
587t15ea002161885c61d573b9f189ce9064610831c33fc6d3d665e5cde558525405065cca72026-09-28
530t1d3e16b754ff934b862d6ca24b352f0769a33142b66ec35f52612ad98ef40fc04c6682b2026-09-30
457t13611d04270b6891d2bb659245cbc42b5165536236381be75bf0ec5c45537002ba79e8b2026-10-27
408t1d9e06800fd699a1ca9d39670ed5902b6a2022233b61b0b11cfe4cbd0843b004b60de9e2026-10-12
333t1eee17db40af93971b6e2db10b352f0f549721c2561ed39f52622bd88ee85f81087782b2026-09-23
322t10241bfb3db605627b961c454cafe57a6261dd21a1754ffb3df15848c102a04fa43bc2f2026-10-12
296t1d211020260b689282bb259205cbc42f1165526233341be75bf0ec5c4993b002aa78e8b2026-10-27
293t1d90189b04774b1111a62d6a498ddab03512fca274a0ced33ef37586c261c4eed62ac9f2026-09-07
264t1fe11104270b6891c2bb259245cbc42b0165532232381be74bf0ec5c05937002ba79e8b2026-09-21
264t178310071567851269aa1ec64d9ed97b2652ac7171340ff32df26c0cc281a449f62ac0f2026-08-11