Statistics

YARAify produces detailed statistics on files scanned, including associated detections - find the available statistics below.

You can also access Spamhaus's Malware Digest report, based on YARAify data:

File Scans

The chart below shows the number of file scans conducted by YARAify over the past 30 days.

Data Scanned

This chart shows the amount of data scanned in Megabytes over the past 30 days.

API requests

The illustration below documents the number of API requests over the past 30 days.

Most matching YARA rules

YARA rules that matched most on files scanned on YARAify in the past 14 days.

Task countYARA RuleAuthorLast match
220'133VECT_RansomwareMustafa Bakhit2026-07-26
158'626SEH__vectored2026-07-26
141'785meth_stackstringsWilli Ballenthin2026-07-26
131'329Windows_Ransomware_Azov_e1ef131eElastic Security2026-07-25
126'045golang_bin_JCorn_CSC846Justin Cornwell2026-07-26
82'762DebuggerCheck__API2026-07-26
70'886TH_AntiVM_MassHunt_Win_Malware_2026_CYFARECYFARE2026-07-26
69'527CP_Script_Inject_DetectorDiegoAnalytics2026-07-26
62'321FreddyBearDropperDwarozh Hoshiar2026-07-26
57'685DetectEncryptedVariantsZinyth2026-07-26
57'635pe_detect_tls_callbacks2026-07-26
53'438UPXkevoreilly2026-07-26
51'518UPXV200V290MarkusOberhumerLaszloMolnarJohnReisermalware-lu2026-07-26
45'509UPXv20MarkusLaszloReisermalware-lu2026-07-26
43'284NETmalware-lu2026-07-26

ClamAV Most matching ClamAV signature

ClamAV signature that matched most on files scanned on YARAify in the past 14 days.

Task countClamAV SignatureLast match
35'384PUA.Win.Packer.Lccwin-22026-07-26
34'850SecuriteInfo.com.BackDoor.HangUp.43914.UNOFFICIAL2026-07-26
27'578Win.Malware.Genpack-6989317-02026-07-26
26'159Win.Trojan.Padodor-10016488-02026-07-26
26'158Win.Trojan.Qukart-6874817-02026-07-26
26'144Win.Malware.Qukart-6838239-02026-07-26
25'447SecuriteInfo.com.BackDoor.HangUp.43791.UNOFFICIAL2026-07-25
25'210Win.Trojan.Berbew-9994138-02026-07-25
25'016SecuriteInfo.com.BackDoor.IRC.Tdongs.13538.21428.UNOFFICIAL2026-07-25
23'266Win.Trojan.Obfus-382026-07-26
21'833Win.Dropper.Razy-7605528-02026-07-26
18'842Win.Trojan.Vilsel-46212026-07-26
18'842Win.Trojan.Vilsel-46222026-07-26
14'383Win.Malware.Vilsel-6804257-02026-07-26
9'789PUA.Win.Packer.Aspack-302026-07-26

Most seen files

Most seen files scanned by YARAify in the past 14 days.

Task countSHA256 hashLast seen
93993fa0b4e948da59e92cc8f5809c7fa87fdb62068bf08bc6767f5403e9d1e77f72026-06-03
2749158d9f8f3dde173e80aee9d30a61dffa0d3a0e088338b971240dc692f0fe4e82026-05-13
1750a35426736c00f1093d093059da49ac42b23113ea8019bcacf6769d5227dc7952026-07-15
13739e48a3fc7e67968ff5d6e3cf8e12a7256af93ccabbce4da20d28c79237d95e82022-01-06
137b3986e04464339cec16157cf8c8bffec3a8a8c5eae57997974d45f5369fa16552021-07-07
137e0af7f483f4965dca90eb5921ae004a7e41593b39284a63af97a9105b96718e72022-01-06
13223c2d2b0c6cec3e69cb07f942c9e56f2087aeb24015be25823897faafc4708ae2022-02-07
130ebd6320e24d47c0d638749a149f14f4c94b1c98afa228dba1f48eea19a2c72572021-07-09
13069c88b4d5ea84620d1b762d5119fe9293c34e68268e7006cb503b865e963b2512021-07-09
13053c22863323c0f5ff94f4ae86df27a51db4eae7232cc38333346ee8be9df5aa62022-02-07
1275ea4d94c695189639e9ab7afe8d76d231030921fbfdd95e1941c7c0a05fb8f032022-02-07
126ad943a1b9988632499f0c25bdeba83b9cd678265eef42b3a2b0d7ccb71d29dd72021-07-12
1261115b6c913a207b9d81f8482613b2a9c2929ca81399861d2d2c47422e244060d2022-02-07
125fca8b7602117941685054ee9930096d92ec95d04cc0b91fe38ea42bb137e96572023-07-13
12532996a04eeead4de0813ca803033429fd38e0aa4ab8d603508e1d2c6bd38aba72022-02-08

Top dhash icon

Top dhash icon observed on files scanned by YARAify in the past 14 days.

Task countdhash iconLast seen
12'77995ccc4d0c4fc7c002026-07-26
11'51700ccc4d0c4fcfc452026-07-26
4'6039ab666b2a6b490c82026-07-25
3'60600ccc4d0c4fc7c002026-07-26
3'30419f8e0e8e8f0f0f02026-07-25
3'302aebc385c4ce0e8f82026-07-25
3'302258dcbeccc71710f2026-07-26
2'90904ccfee2ece4a4842026-07-26
2'32402c0b0746c60b0182026-07-26
1'831bae2e5e7e5a5a69a2026-07-26
1'61774f0f4d4d4d4c0c42026-07-26
1'4175050d270cccc82ae2026-07-25
1'34080cc86a2a286cc7e2026-07-26
1'082b69292b2ca8ca49b2026-07-25
7931003873d31213f102026-07-26

Top imphash

Top imphash observed on files scanned by YARAify in the past 14 days.

Task countimphashLast seen
21'4273f8d79e42b0b7cecf379b1ddce4e422a2026-07-21
10'0641f75ee5de8ac0c77c6e43508555114fe2026-07-21
9'516dae02f32a21e03ce65412f6e56942daa2026-07-21
9'159f34d5f2d4577ed6d9ceec516c1f5a7442026-07-21
6'359c9246f292a6fdc22d70e6e581898a0262026-07-21
5'41591f4b88d25daa33c7443253d9beb1bb32026-07-21
4'41576515d04dff07b5b4a25c41ca10134842026-07-21
4'1579445e2cedbd7dbfed0146212daf6af2b2026-07-21
3'987a12d186f65c99f872323a61923ce70d82026-07-21
3'595f481ea8169d367d8b0e94d0bf02da2202026-07-21
3'565351592d5ead6df0859b0cc0056827c952026-07-21
3'15088478c1f74f94f7e1e9654193a1e02b32026-07-21
3'0965271d5ce8b44dd47bc92563e275854662026-07-21
3'05001392ca861cf87b8d28ad9ea90016bb42026-07-21
2'707e53247c3407e6cdcf4a615d50e518a232026-07-21

Top tlsh

Top tlsh observed on files scanned by YARAify in the past 14 days.

Task counttlshLast seen
138T138118CABCBE6ACF1C80C10B4070B8D013674883443E1C3170EA5007E7CA22FCD8B6E022021-07-09
137T1EF16DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
137T1C8E052F688E090AC080023A82BDF2CA5437B03BD00202A0BF20BA04D022DF72E30A3F02021-07-07
136T1CCE2F87B94C24337C001EFB60B95C9AEBB736D306564C0E32BD42B1F892B9687D5D4692021-07-09
136T10016DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
130T1DAA19DFCAAC8920C1C11729057DF7C931EE71FB02F252A97972E2659B720E3A61374872025-07-06
130T15B8193C992427125F5E380F0462798F237893566B1AE8AD402CEA83C28039C0C758A372022-02-09
129T1F003069F36E31001EB08BE36C154828FEF06CF59B976974EE7D826C72360A78631E4592022-02-08
129T1688141C1405F2A7CF2ED8ABCA20506C43D46B4B324754D651184782DAA23E4C7722A332022-02-08
129T1B68130E0D3C23230F2AE09F1A687B6E1520125260DA4DD85A2934C9D4DA2D88B731C3B2022-02-07
128T1A58162A0432FB74ADC5680B151DEA0E16667707204E5CA0551C916ADDB829F0EF74C332022-02-08
128T10E8132A0832FBA4ADC96847151DEE1E16667307604E5C50161DA26DEDB83AE4EF78C332022-02-08
128T16103299736E33025EB08BE35C154838FEF06CF59B9B7974AD39826C72350A78631E45A2022-02-09
128T1DD816250432BB64AEC9A84B0409EA1E13657217214F2C91161CA66DC8B82AF4AF68C332022-02-08
127T10D03F7A736E31001FB09BE36C154828FEF06CF59B976D74AE79836C72360A78631E4592022-02-07

Top telfhash

Top telfhash observed on files scanned by YARAify in the past 14 days.

Task counttelfhashLast seen
47t196111448683ec45a7de30664cc3c5a95d70fcd3538514720df08c7c4897e4059219f5f2026-07-20
38t198d0a723ff966ee44f664296c88d521213ddb2784a3048467fef6f8f4902486760e4432026-07-14
36t1ac2141e7543da4a04adeac80e59b2724e10ff19458b10a23fca0c65c72fe61f49674eb2026-07-14
31t192d00224587813b052cd8c6e55dceb08a860a5e7aaa31d1fdd94c899ea26e4b9d01d2c2026-07-14
30t19f900224424f44549a804241e0dd66018ed0e3131125289007d04440140332060051412026-07-18
27t1f6b00121eb906524a6b1da0a6a533e48b46a31e5b0756164299f6101b61c64526d30042026-07-19
22t1ba01f13506c44cdc9bd0c106e1ef152ac98ef8b93720098eb5fdef8a92a36d5b3124092026-07-21
21t19801ce304a8659dc9bd0c10b12ef1246551cf2f133201d6db7e9dadb95c3469f31642d2026-07-21
21t1f1d0a726c8840ae4b765821001e353a09a88f55b565104d0dac51f7fef119227125a312026-07-20
21t141018972458d48edaaf4c28653ef62194a2df1ed37a0591fb5fc9e0e16c38d3f2219042026-07-21
21t1a0b01122cc8a8e020200882e0a0a022fe280feb82c0bf303a0b80c28e0b2c8e00000832026-07-16
20t1b5115b588d3812f59b721edd6aecfe76e45170df4a215e3b8c00fdad9a2d9428e00c2c2026-07-15
20t110b012b961c432414604ca8b04aa1020e09234140115041702223f8c677384451910052026-07-18
18t1db2107e13da608fdf791ac1fd71f16a79b155a638a20a0bb04f57b463ff217191209212026-07-11
18t197d02e3bd7822e98d3d8440192ce87182f88b30f137200a25fe81d1ecb00ea3e42c0292026-07-16

File Scans

The chart below shows the number of file scans conducted by YARAify over the past 12 months.

Data Scanned

This chart shows the amount of data scanned in Megabytes over the past past 12 months.

API requests

The illustration below documents the number of API requests over the past past 12 months.

Most matching YARA rules

YARA rules that matched most on files scanned on YARAify in the past 12 months.

Task countYARA RuleAuthorLast match
12'272'912CP_AllMal_DetectorDiegoAnalytics2025-10-08
10'506'624Sus_Obf_Enc_Spoof_Hide_PEXiAnzheng2025-09-16
3'582'942golang_bin_JCorn_CSC846Justin Cornwell2026-07-26
3'368'233vmdetectnex2026-07-26
2'771'528DebuggerCheck__API2026-07-26
2'653'591SEH__vectored2026-07-26
2'544'771NETmalware-lu2026-07-26
2'302'402meth_stackstringsWilli Ballenthin2026-07-26
2'300'103CP_Script_Inject_DetectorDiegoAnalytics2026-07-26
2'110'698FreddyBearDropperDwarozh Hoshiar2026-07-26
1'926'421VECT_RansomwareMustafa Bakhit2026-07-26
1'904'833Windows_Ransomware_Azov_e1ef131eElastic Security2026-07-25
1'598'019DetectEncryptedVariantsZinyth2026-07-26
1'470'432pe_detect_tls_callbacks2026-07-26
1'431'942Sus_CMD_Powershell_UsageXiAnzheng2026-07-26

ClamAV Most matching ClamAV signature

ClamAV signature that matched most on files scanned on YARAify in the past 12 Mmonths.

Task countClamAV SignatureLast match
2'575'344PUA.Win.Packer.Lccwin-22026-07-26
1'726'083Win.Trojan.Obfus-382026-07-26
1'438'032SecuriteInfo.com.BackDoor.HangUp.43914.UNOFFICIAL2026-07-26
1'311'875Win.Malware.Qukart-6838239-02026-07-26
1'286'131Win.Trojan.Qukart-6874817-02026-07-26
1'285'623Win.Trojan.Padodor-10016488-02026-07-26
1'041'146Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-02026-07-08
947'267Win.Trojan.Padodor-9877164-02026-07-23
840'025SecuriteInfo.com.BackDoor.HangUp.43791.UNOFFICIAL2026-07-25
744'708SecuriteInfo.com.BackDoor.HangUp.44049.10213.32330.UNOFFICIAL2026-07-23
738'566SecuriteInfo.com.BackDoor.IRC.Tdongs.13538.21428.UNOFFICIAL2026-07-25
650'128Porcupine.Phishing.431944.UNOFFICIAL2026-05-11
486'691SecuriteInfo.com.PDF.URI-55.UNOFFICIAL2026-05-12
441'243Win.Trojan.Berbew-9994138-02026-07-25
435'372Porcupine.Phishing.62637.UNOFFICIAL2026-04-16

Most seen files

Most seen files scanned by YARAify in the past 12 months.

Task countSHA256 hashLast seen
37'039d6633d80c9d885fb2e8d85bf105094b748eb4c82a75ea814faec1ec1da6b96e22026-04-09
37'017313f87c13fcf1ec47c003b6acfd60e3881af03a8e9d0ed661400bd088dabb11a2026-04-09
36'9645ab7476e201c6a9a643d6f0114fd93966eb08ffbb9ea76ddcfef9cc4694107102026-04-09
36'93320ace18e5a414158e5fcff4e34b29a3da1dcfc77dc355f01acc6ed1ae1e461542026-04-09
36'870468c929e26183073565264f0fd56e2a18c94c22f6e1c25485a3d56f5af82fd6d2026-04-09
36'780cdcef808517276d7342cf23f4643608c23452b675348758471567f30e555a7742026-04-09
36'7754fde43424b313e5229483b3982a63ffbaf78270201dfe52388a260b7999d01db2026-04-09
36'701cd8085fea1e830a8f221469eb6d93a0e3d162c51f47f4541f33226a7d682af1d2026-04-09
34'2916addc1507753725aa21d168657089f8114a5b6032564a37b6c0aee7111e8fa192026-04-19
33'94841df3028defec608a8b85b9341e8cf60573c67ba719b3113ac6616c85dd3cbbb2026-04-19
24'6981d6556b831c20b7a723793e5cf912cb943007b5197fba45dc104de2f1da42b0f2026-02-14
23'857ba853ce86469cece5d3702a5adc74152d9321225ca78cc9f4b1d20314d4c43a62026-02-14
22'05395041a485c262a0769e22e559d2df1a7f5fce10891bc5857b6fcdd207729e4532026-03-29
21'796f2a66afebb5f0d3dd5bf1b531f9e35b540762bc7b1f2042e6c3b8b5623be14782026-03-29
21'753bf6cd63bf87ad6a52960cff738fe7d546768e77dcb7af947fc3f888e43f5c4ba2026-03-29

Top dhash icon

Top dhash icon observed on files scanned by YARAify in the past 12 months.

Task countdhash iconLast seen
177'22500ccc4d0c4fc7c002026-07-21
129'06404ccfee2ece4a4842026-07-21
122'41200ccc4d0c4fcfc452026-07-21
120'69792e0b496a6cada722026-07-21
84'88002c0b0746c60b0182026-07-21
80'5761003873d31213f102026-07-21
71'9131003873db9313e102026-07-19
65'844e9f4aa8accc6c6642026-07-21
65'47595ccc4d0c4fc7c002026-07-21
60'08169ccd4d49696cc712026-07-21
49'359818da080a0a0a0a22026-07-21
43'404b6caeab2eac8e8712026-07-21
34'88619f8e0e8e8f0f0f02026-07-21
32'9941003873db9313e162026-07-21
32'673e0f0e48c8ca4c0e02026-07-21

Top imphash

Top imphash observed on files scanned by YARAify in the past 12 months.

Task countimphashLast seen
536'72246f03ef2495b21d7ad3e8d36dc03315d2026-06-09
300'8903f8d79e42b0b7cecf379b1ddce4e422a2026-07-22
290'580f34d5f2d4577ed6d9ceec516c1f5a7442026-07-22
285'3524dcbc0931c6f88874a69f966c86889d92026-07-17
227'769dae02f32a21e03ce65412f6e56942daa2026-07-22
225'185c9246f292a6fdc22d70e6e581898a0262026-07-21
186'6536db997463de98ce64bf5b6b8b0f77a452026-06-27
139'10991f4b88d25daa33c7443253d9beb1bb32026-07-22
116'97787914047e74de74a89c530e3bb19409e2026-07-20
114'07209d0478591d4f788cb3e5ea416c252372026-07-22
110'2455d6cad172c5535e4b6b6bbd2465716212026-07-22
94'5891f75ee5de8ac0c77c6e43508555114fe2026-07-22
86'657a12d186f65c99f872323a61923ce70d82026-07-22
85'65976515d04dff07b5b4a25c41ca10134842026-07-22
67'7125271d5ce8b44dd47bc92563e275854662026-07-22

Top tlsh

Top tlsh observed on files scanned by YARAify in the past 14 months.

Task counttlshLast seen
20'676T10D7312EA5208D5F57C50FC66EDF570BD01DCEE01DA7791F83AEA84822A21D0A5C5ABD02025-07-05
15'592T1F35436139C199F43A068C7A8BF131E6C6F196A4DA9C676EF50634DCB3B243311C9E16E2025-10-14
3'896T190C46C2AA4604176E4F5213121FE7A672CBD2E6443ED24D377A05E8D6DA41F3B2381EF2021-11-18
3'590T1C8E052F688E090AC080023A82BDF2CA5437B03BD00202A0BF20BA04D022DF72E30A3F02021-07-07
3'575T1EF16DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
3'573T10016DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
3'543T1B5033E9736E31000FB09BE35C654834FEF06CF59B97A9B4ED39826C72371A78629E0592022-02-07
3'505T160030B9736E31000FB09BE32E554C24FEF06CF59B976974ED39826C72350A78662E45B2022-02-07
3'470T1BD812B4525A230CAC056C270ED52C158ABD9BC37AF44D3BBF1B90FDD83112451CC1B0B2022-02-07
3'457T13A03389736E31100FB08FE32C554838FEF86CF69B976974AD79826C72350A78621E45E2022-02-08
3'456T138118CABCBE6ACF1C80C10B4070B8D013674883443E1C3170EA5007E7CA22FCD8B6E022021-07-09
3'449T153819E61842314C4F557CFF0D61BD82AAFA5334684584E1123E0606A4BCF60427041E32022-02-07
3'421T1D7819E61842314C4F557CEF4D51BE869BFA5734550584E1423E0705A4BCBA1427551A32022-02-08
3'401T1CCE2F87B94C24337C001EFB60B95C9AEBB736D306564C0E32BD42B1F892B9687D5D4692021-07-09
3'365T133E48D51F185C076E0F116B0A6FE7A5B146C2975471D38E3EB98BEC929740F27A3C28B2021-08-11

Top telfhash

Top telfhash observed on files scanned by YARAify in the past 12 months.

Task counttelfhashLast seen
583t13611d04270b6891d2bb659245cbc42b5165536236381be75bf0ec5c45537002ba79e8b2026-07-17
528t1f6b00121eb906524a6b1da0a6a533e48b46a31e5b0756164299f6101b61c64526d30042026-07-19
429t178310071567851269aa1ec64d9ed97b2652ac7171340ff32df26c0cc281a449f62ac0f2026-07-06
427t1d9e06800fd699a1ca9d39670ed5902b6a2022233b61b0b11cfe4cbd0843b004b60de9e2026-07-03
379t11df0c084fe764f1589e1a574dcac0360ed436126a562ab20ef52cad0883e149d70cd1d2026-07-17
365t1d211020260b689282bb259205cbc42f1165526233341be75bf0ec5c4993b002aa78e8b2026-07-17
347t1fe11104270b6891c2bb259245cbc42b0165532232381be74bf0ec5c05937002ba79e8b2026-07-17
333t10751b1fa6dba08ecfbd0a804c75e5bd33669ca7b153025b0406398b532f79954475c3a2026-07-06
324t1e7e02640ec759e1c68cb6974accc06b09601222260664b00cf10daf4c83f450e30ca4a2026-06-05
317t12e11401a8f942e4eaff4000e869ea21b547075592f2b78538c2a752b93831c2f06dc532026-07-06
314t10241bfb3db605627b961c454cafe57a6261dd21a1754ffb3df15848c102a04fa43bc2f2026-07-01
294t1564165181e7817b063356c4e159cef3b96a320db7e176c378e51e86aab699835d10c0c2026-07-06
282t17951bbb0399939d8a2fbfb37730be9a45cb50a6015e172d1ceb769e2de417840cb14632026-07-06
264t17a211db1573a96295955de9c8aec6775062cd3062282ef33ff3184ac640004eea2ac0f2026-07-07
261t173111069cfd8159e2fe08244e15db44e9a74726d1f6735925d756a8fd1428e3306cc202026-07-06