Statistics

YARAify produces detailed statistics on files scanned, including associated detections - find the available statistics below.

You can also access Spamhaus's Malware Digest report, based on YARAify data:

File Scans


The chart below shows the number of file scans conducted by YARAify over the past 30 days.

Data Scanned


This chart shows the amount of data scanned in Megabytes over the past 30 days.

API requests


The illustration below documents the number of API requests over the past 30 days.

Most matching YARA rules


YARA rules that matched most on files scanned on YARAify in the past 14 days.

Task countYARA RuleAuthorLast match
231'345VECT_RansomwareMustafa Bakhit2026-07-17
185'110SEH__vectored2026-07-17
162'825meth_stackstringsWilli Ballenthin2026-07-17
151'456Windows_Ransomware_Azov_e1ef131eElastic Security2026-07-17
146'233golang_bin_JCorn_CSC846Justin Cornwell2026-07-17
98'659DebuggerCheck__API2026-07-17
83'941TH_AntiVM_MassHunt_Win_Malware_2026_CYFARECYFARE2026-07-17
83'430CP_Script_Inject_DetectorDiegoAnalytics2026-07-17
72'105DetectEncryptedVariantsZinyth2026-07-17
68'637FreddyBearDropperDwarozh Hoshiar2026-07-17
61'035pe_detect_tls_callbacks2026-07-17
55'832NETmalware-lu2026-07-17
53'559telebot_frameworkvietdx.mb2026-07-17
52'273Sus_CMD_Powershell_UsageXiAnzheng2026-07-17
49'749UPXV200V290MarkusOberhumerLaszloMolnarJohnReisermalware-lu2026-07-17

ClamAV Most matching ClamAV signature


ClamAV signature that matched most on files scanned on YARAify in the past 14 days.

Task countClamAV SignatureLast match
32'314PUA.Win.Packer.Lccwin-22026-07-17
32'159SecuriteInfo.com.BackDoor.HangUp.43914.UNOFFICIAL2026-07-17
26'549Win.Malware.Genpack-6989317-02026-07-17
24'572Win.Trojan.Qukart-6874817-02026-07-17
24'568Win.Trojan.Padodor-10016488-02026-07-17
24'558Win.Malware.Qukart-6838239-02026-07-17
23'717SecuriteInfo.com.BackDoor.HangUp.43791.UNOFFICIAL2026-07-17
23'417Win.Trojan.Berbew-9994138-02026-07-17
23'308SecuriteInfo.com.BackDoor.IRC.Tdongs.13538.21428.UNOFFICIAL2026-07-17
21'405Win.Trojan.Obfus-382026-07-17
20'341Win.Dropper.Razy-7605528-02026-07-17
18'125Win.Trojan.Vilsel-46222026-07-17
18'125Win.Trojan.Vilsel-46212026-07-17
12'806Win.Malware.Vilsel-6804257-02026-07-17
10'678PUA.Win.Packer.Aspack-302026-07-17

Most seen files


Most seen files scanned by YARAify in the past 14 days.

Task countSHA256 hashLast seen
818b0145d6283981447cb4ccd3247a5855f95a77918922cb5daa5b869672d2e37cd2026-07-07
199f948f645670282e975bb7619c89e56472302b3aa382d5b15fca48324ed4f59682026-07-06
1750a35426736c00f1093d093059da49ac42b23113ea8019bcacf6769d5227dc7952026-07-15
14069c88b4d5ea84620d1b762d5119fe9293c34e68268e7006cb503b865e963b2512021-07-09
140ebd6320e24d47c0d638749a149f14f4c94b1c98afa228dba1f48eea19a2c72572021-07-09
138e0af7f483f4965dca90eb5921ae004a7e41593b39284a63af97a9105b96718e72022-01-06
13793ffa6afdbc71c9f6a0a8752ccdbbf697a7e2cca5a146bf010cb8851402875222026-07-07
13639e48a3fc7e67968ff5d6e3cf8e12a7256af93ccabbce4da20d28c79237d95e82022-01-06
136b3986e04464339cec16157cf8c8bffec3a8a8c5eae57997974d45f5369fa16552021-07-07
1305ea4d94c695189639e9ab7afe8d76d231030921fbfdd95e1941c7c0a05fb8f032022-02-07
13023c2d2b0c6cec3e69cb07f942c9e56f2087aeb24015be25823897faafc4708ae2022-02-07
12996994840078a8dbaaa3175c80b72c01c3a7f258be338c94c58672cacf5e47a872022-02-08
129c8c158269c68d6b09d0c8b118b6588302816f2936c193579b35512d6a6af506e2022-02-08
1290ce3ad160c7eba4658f41d444b990581fc2e8711132ad2f76bee64dd717f93022025-07-06
129cdfb8e3d5bfb32850200759b0d3ccaa83ed5cb661cb2cccedf048d23959663602022-02-08

Top dhash icon


Top dhash icon observed on files scanned by YARAify in the past 14 days.

Task countdhash iconLast seen
13'55195ccc4d0c4fc7c002026-07-17
9'61500ccc4d0c4fcfc452026-07-17
5'2419ab666b2a6b490c82026-07-17
3'95300ccc4d0c4fc7c002026-07-17
3'60504ccfee2ece4a4842026-07-17
3'360aebc385c4ce0e8f82026-07-16
3'25519f8e0e8e8f0f0f02026-07-16
3'151258dcbeccc71710f2026-07-17
2'79602c0b0746c60b0182026-07-17
2'028bae2e5e7e5a5a69a2026-07-17
1'85574f0f4d4d4d4c0c42026-07-17
1'7105050d270cccc82ae2026-07-16
1'488b69292b2ca8ca49b2026-07-16
1'26480cc86a2a286cc7e2026-07-16
1'122e9ccb6a6e4c4ccf82026-07-17

Top imphash


Top imphash observed on files scanned by YARAify in the past 14 days.

Task countimphashLast seen
23'5613f8d79e42b0b7cecf379b1ddce4e422a2026-07-17
9'711f34d5f2d4577ed6d9ceec516c1f5a7442026-07-17
9'3191f75ee5de8ac0c77c6e43508555114fe2026-07-17
9'115dae02f32a21e03ce65412f6e56942daa2026-07-17
7'605c9246f292a6fdc22d70e6e581898a0262026-07-17
5'98791f4b88d25daa33c7443253d9beb1bb32026-07-17
4'28576515d04dff07b5b4a25c41ca10134842026-07-17
3'615a12d186f65c99f872323a61923ce70d82026-07-17
3'606f481ea8169d367d8b0e94d0bf02da2202026-07-17
3'2059445e2cedbd7dbfed0146212daf6af2b2026-07-16
3'1695271d5ce8b44dd47bc92563e275854662026-07-17
3'116351592d5ead6df0859b0cc0056827c952026-07-17
2'95388478c1f74f94f7e1e9654193a1e02b32026-07-17
2'88401392ca861cf87b8d28ad9ea90016bb42026-07-17
2'559e53247c3407e6cdcf4a615d50e518a232026-07-17

Top tlsh


Top tlsh observed on files scanned by YARAify in the past 14 days.

Task counttlshLast seen
141T10016DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
140T1EF16DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
140T138118CABCBE6ACF1C80C10B4070B8D013674883443E1C3170EA5007E7CA22FCD8B6E022021-07-09
140T1CCE2F87B94C24337C001EFB60B95C9AEBB736D306564C0E32BD42B1F892B9687D5D4692021-07-09
140T1C8E052F688E090AC080023A82BDF2CA5437B03BD00202A0BF20BA04D022DF72E30A3F02021-07-07
132T1AAF22909ED0ECCF1EDE552F840FE9BBA4B60A807C43256A3FB41DB58B4532AD08397562025-04-05
131T104942955F242C23BC0523DB84A4989F55672DD303C32E0EB77DA1E1F6B75EA26F286062023-10-26
130T1B5033E9736E31000FB09BE35C654834FEF06CF59B97A9B4ED39826C72371A78629E0592022-02-07
130T160030B9736E31000FB09BE32E554C24FEF06CF59B976974ED39826C72350A78662E45B2022-02-07
130T1DAA19DFCAAC8920C1C11729057DF7C931EE71FB02F252A97972E2659B720E3A61374872025-07-06
128T1AE93296AB0C3433BC141BFB54B4449AAB722E8203961C0F773D82E5FCA6B9957E1C55E2021-07-12
127T1F003069F36E31001EB08BE36C154828FEF06CF59B976974EE7D826C72360A78631E4592022-02-08
126T1F9033F8736E31004BB09BE35C754834FEF46CF59B97A9B4ED39826C72370A78629E0592022-02-07
126T10D03F7A736E31001FB09BE36C154828FEF06CF59B976D74AE79836C72360A78631E4592022-02-07
126T16103299736E33025EB08BE35C154838FEF06CF59B9B7974AD39826C72350A78631E45A2022-02-09

Top telfhash


Top telfhash observed on files scanned by YARAify in the past 14 days.

Task counttelfhashLast seen
38t198d0a723ff966ee44f664296c88d521213ddb2784a3048467fef6f8f4902486760e4432026-07-14
36t1ac2141e7543da4a04adeac80e59b2724e10ff19458b10a23fca0c65c72fe61f49674eb2026-07-14
31t192d00224587813b052cd8c6e55dceb08a860a5e7aaa31d1fdd94c899ea26e4b9d01d2c2026-07-14
21t1a0b01122cc8a8e020200882e0a0a022fe280feb82c0bf303a0b80c28e0b2c8e00000832026-07-16
20t19f900224424f44549a804241e0dd66018ed0e3131125289007d04440140332060051412026-07-14
20t1b5115b588d3812f59b721edd6aecfe76e45170df4a215e3b8c00fdad9a2d9428e00c2c2026-07-15
18t116d05e46f7924cc85ec1006180cfa316ab6aa1aa27010005f9906f428d82c83b43b4062026-07-13
18t1db2107e13da608fdf791ac1fd71f16a79b155a638a20a0bb04f57b463ff217191209212026-07-11
18t197d02e3bd7822e98d3d8440192ce87182f88b30f137200a25fe81d1ecb00ea3e42c0292026-07-16
17t1e321c10c497822e067351c9d1aeeef72e59130df57362e338e11e9aea6bc9824e00c1c2026-07-14
17t137d0976bffb819d843c04aa640de820a13ccb0622d118023fbfa1f0a9402102752fc532026-07-15
17t160e024f2834fa625064dcbdd83ca739c5a2de0480147ef53fe41043c909a94e361498f2026-07-16
16t196111448683ec45a7de30664cc3c5a95d70fcd3538514720df08c7c4897e4059219f5f2026-07-13
16t13611d04270b6891d2bb659245cbc42b5165536236381be75bf0ec5c45537002ba79e8b2026-07-17
16t179c08c4b5a884fcca8d443852929320794a435aa2b52e1f9d6a83f2e09128d5f4c20322026-07-10

File Scans


The chart below shows the number of file scans conducted by YARAify over the past 12 months.

Data Scanned


This chart shows the amount of data scanned in Megabytes over the past past 12 months.

API requests


The illustration below documents the number of API requests over the past past 12 months.

Most matching YARA rules


YARA rules that matched most on files scanned on YARAify in the past 12 months.

Task countYARA RuleAuthorLast match
13'593'745Sus_Obf_Enc_Spoof_Hide_PEXiAnzheng2025-09-16
12'272'912CP_AllMal_DetectorDiegoAnalytics2025-10-08
3'690'033golang_bin_JCorn_CSC846Justin Cornwell2026-07-17
3'504'819vmdetectnex2026-07-17
2'857'901DebuggerCheck__API2026-07-17
2'645'093NETmalware-lu2026-07-17
2'620'296SEH__vectored2026-07-17
2'258'739meth_stackstringsWilli Ballenthin2026-07-17
2'255'106CP_Script_Inject_DetectorDiegoAnalytics2026-07-17
2'198'561FreddyBearDropperDwarozh Hoshiar2026-07-17
1'840'303Windows_Ransomware_Azov_e1ef131eElastic Security2026-07-17
1'786'950VECT_RansomwareMustafa Bakhit2026-07-17
1'660'912DetectEncryptedVariantsZinyth2026-07-17
1'524'276pe_detect_tls_callbacks2026-07-17
1'467'894Sus_CMD_Powershell_UsageXiAnzheng2026-07-17

ClamAV Most matching ClamAV signature


ClamAV signature that matched most on files scanned on YARAify in the past 12 Mmonths.

Task countClamAV SignatureLast match
2'667'894PUA.Win.Packer.Lccwin-22026-07-17
1'788'359Win.Trojan.Obfus-382026-07-17
1'413'630SecuriteInfo.com.BackDoor.HangUp.43914.UNOFFICIAL2026-07-17
1'360'229Win.Malware.Qukart-6838239-02026-07-17
1'335'297Win.Trojan.Qukart-6874817-02026-07-17
1'334'794Win.Trojan.Padodor-10016488-02026-07-17
1'041'146Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-02026-07-08
990'013Win.Trojan.Padodor-9877164-02026-06-09
863'964SecuriteInfo.com.BackDoor.HangUp.43791.UNOFFICIAL2026-07-17
744'483SecuriteInfo.com.BackDoor.HangUp.44049.10213.32330.UNOFFICIAL2026-07-16
720'918SecuriteInfo.com.BackDoor.IRC.Tdongs.13538.21428.UNOFFICIAL2026-07-17
650'128Porcupine.Phishing.431944.UNOFFICIAL2026-05-11
500'074SecuriteInfo.com.PDF.URI-55.UNOFFICIAL2026-05-12
443'156Win.Trojan.Berbew-9994138-02026-07-17
435'372Porcupine.Phishing.62637.UNOFFICIAL2026-04-16

Most seen files


Most seen files scanned by YARAify in the past 12 months.

Task countSHA256 hashLast seen
37'039d6633d80c9d885fb2e8d85bf105094b748eb4c82a75ea814faec1ec1da6b96e22026-04-09
37'017313f87c13fcf1ec47c003b6acfd60e3881af03a8e9d0ed661400bd088dabb11a2026-04-09
36'9645ab7476e201c6a9a643d6f0114fd93966eb08ffbb9ea76ddcfef9cc4694107102026-04-09
36'93320ace18e5a414158e5fcff4e34b29a3da1dcfc77dc355f01acc6ed1ae1e461542026-04-09
36'870468c929e26183073565264f0fd56e2a18c94c22f6e1c25485a3d56f5af82fd6d2026-04-09
36'780cdcef808517276d7342cf23f4643608c23452b675348758471567f30e555a7742026-04-09
36'7754fde43424b313e5229483b3982a63ffbaf78270201dfe52388a260b7999d01db2026-04-09
36'701cd8085fea1e830a8f221469eb6d93a0e3d162c51f47f4541f33226a7d682af1d2026-04-09
34'2916addc1507753725aa21d168657089f8114a5b6032564a37b6c0aee7111e8fa192026-04-19
33'94841df3028defec608a8b85b9341e8cf60573c67ba719b3113ac6616c85dd3cbbb2026-04-19
24'6981d6556b831c20b7a723793e5cf912cb943007b5197fba45dc104de2f1da42b0f2026-02-14
23'857ba853ce86469cece5d3702a5adc74152d9321225ca78cc9f4b1d20314d4c43a62026-02-14
22'05395041a485c262a0769e22e559d2df1a7f5fce10891bc5857b6fcdd207729e4532026-03-29
21'796f2a66afebb5f0d3dd5bf1b531f9e35b540762bc7b1f2042e6c3b8b5623be14782026-03-29
21'753bf6cd63bf87ad6a52960cff738fe7d546768e77dcb7af947fc3f888e43f5c4ba2026-03-29

Top dhash icon


Top dhash icon observed on files scanned by YARAify in the past 12 months.

Task countdhash iconLast seen
187'10500ccc4d0c4fc7c002026-07-17
132'68304ccfee2ece4a4842026-07-17
121'08000ccc4d0c4fcfc452026-07-17
120'73292e0b496a6cada722026-07-17
86'24102c0b0746c60b0182026-07-17
84'9561003873d31213f102026-07-17
75'9881003873db9313e102026-07-17
74'252e9f4aa8accc6c6642026-07-17
64'79369ccd4d49696cc712026-07-17
60'36995ccc4d0c4fc7c002026-07-17
50'150818da080a0a0a0a22026-07-17
43'786b6caeab2eac8e8712026-07-17
34'266e0f0e48c8ca4c0e02026-07-17
33'8211003873db9313e162026-07-17
32'89619f8e0e8e8f0f0f02026-07-17

Top imphash


Top imphash observed on files scanned by YARAify in the past 12 months.

Task countimphashLast seen
721'33846f03ef2495b21d7ad3e8d36dc03315d2026-06-09
355'0273f8d79e42b0b7cecf379b1ddce4e422a2026-07-14
343'2244dcbc0931c6f88874a69f966c86889d92026-07-14
297'118f34d5f2d4577ed6d9ceec516c1f5a7442026-07-14
266'157c9246f292a6fdc22d70e6e581898a0262026-07-14
229'046dae02f32a21e03ce65412f6e56942daa2026-07-14
201'7076db997463de98ce64bf5b6b8b0f77a452026-06-27
147'09687914047e74de74a89c530e3bb19409e2026-07-13
145'02091f4b88d25daa33c7443253d9beb1bb32026-07-14
121'64809d0478591d4f788cb3e5ea416c252372026-07-14
115'8405d6cad172c5535e4b6b6bbd2465716212026-07-14
89'5491f75ee5de8ac0c77c6e43508555114fe2026-07-14
85'90776515d04dff07b5b4a25c41ca10134842026-07-14
85'842a12d186f65c99f872323a61923ce70d82026-07-14
67'9175271d5ce8b44dd47bc92563e275854662026-07-14

Top tlsh


Top tlsh observed on files scanned by YARAify in the past 14 months.

Task counttlshLast seen
20'681T10D7312EA5208D5F57C50FC66EDF570BD01DCEE01DA7791F83AEA84822A21D0A5C5ABD02025-07-05
15'592T1F35436139C199F43A068C7A8BF131E6C6F196A4DA9C676EF50634DCB3B243311C9E16E2025-10-14
3'972T190C46C2AA4604176E4F5213121FE7A672CBD2E6443ED24D377A05E8D6DA41F3B2381EF2021-11-18
3'582T1C8E052F688E090AC080023A82BDF2CA5437B03BD00202A0BF20BA04D022DF72E30A3F02021-07-07
3'567T1EF16DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
3'566T10016DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
3'541T1B5033E9736E31000FB09BE35C654834FEF06CF59B97A9B4ED39826C72371A78629E0592022-02-07
3'504T160030B9736E31000FB09BE32E554C24FEF06CF59B976974ED39826C72350A78662E45B2022-02-07
3'468T1BD812B4525A230CAC056C270ED52C158ABD9BC37AF44D3BBF1B90FDD83112451CC1B0B2022-02-07
3'457T138118CABCBE6ACF1C80C10B4070B8D013674883443E1C3170EA5007E7CA22FCD8B6E022021-07-09
3'457T13A03389736E31100FB08FE32C554838FEF86CF69B976974AD79826C72350A78621E45E2022-02-08
3'448T153819E61842314C4F557CFF0D61BD82AAFA5334684584E1123E0606A4BCF60427041E32022-02-07
3'421T1D7819E61842314C4F557CEF4D51BE869BFA5734550584E1423E0705A4BCBA1427551A32022-02-08
3'403T1CCE2F87B94C24337C001EFB60B95C9AEBB736D306564C0E32BD42B1F892B9687D5D4692021-07-09
3'400T1C5D66B68E683D8F6DC4207754087BAAF22B8A770C779CE27DA046C58DB37E9645373062025-07-20

Top telfhash


Top telfhash observed on files scanned by YARAify in the past 12 months.

Task counttelfhashLast seen
593t13611d04270b6891d2bb659245cbc42b5165536236381be75bf0ec5c45537002ba79e8b2026-07-17
507t1f6b00121eb906524a6b1da0a6a533e48b46a31e5b0756164299f6101b61c64526d30042026-07-15
429t178310071567851269aa1ec64d9ed97b2652ac7171340ff32df26c0cc281a449f62ac0f2026-07-06
427t1d9e06800fd699a1ca9d39670ed5902b6a2022233b61b0b11cfe4cbd0843b004b60de9e2026-07-03
379t11df0c084fe764f1589e1a574dcac0360ed436126a562ab20ef52cad0883e149d70cd1d2026-07-17
375t1d211020260b689282bb259205cbc42f1165526233341be75bf0ec5c4993b002aa78e8b2026-07-17
357t1fe11104270b6891c2bb259245cbc42b0165532232381be74bf0ec5c05937002ba79e8b2026-07-17
333t10751b1fa6dba08ecfbd0a804c75e5bd33669ca7b153025b0406398b532f79954475c3a2026-07-06
327t1e7e02640ec759e1c68cb6974accc06b09601222260664b00cf10daf4c83f450e30ca4a2026-06-05
317t12e11401a8f942e4eaff4000e869ea21b547075592f2b78538c2a752b93831c2f06dc532026-07-06
314t10241bfb3db605627b961c454cafe57a6261dd21a1754ffb3df15848c102a04fa43bc2f2026-07-01
294t1564165181e7817b063356c4e159cef3b96a320db7e176c378e51e86aab699835d10c0c2026-07-06
282t17951bbb0399939d8a2fbfb37730be9a45cb50a6015e172d1ceb769e2de417840cb14632026-07-06
266t17a211db1573a96295955de9c8aec6775062cd3062282ef33ff3184ac640004eea2ac0f2026-07-07
261t173111069cfd8159e2fe08244e15db44e9a74726d1f6735925d756a8fd1428e3306cc202026-07-06