Authenticate for API access | If you are experiencing issues with receiving data from abuse.ch platforms via API, please ensure your requests are authenticated. ➡️ Read here for more info

Statistics

YARAify produces detailed statistics on files scanned, including associated detections - find the available statistics below.

You can also access Spamhaus's Malware Digest report, based on YARAify data:

File Scans


The chart below shows the number of file scans conducted by YARAify over the past 30 days.

Data Scanned


This chart shows the amount of data scanned in Megabytes over the past 30 days.

API requests


The illustration below documents the number of API requests over the past 30 days.

Most matching YARA rules


YARA rules that matched most on files scanned on YARAify in the past 14 days.

Task countYARA RuleAuthorLast match
4'293'173Sus_Obf_Enc_Spoof_Hide_PEXiAnzheng2025-08-06
215'868golang_bin_JCorn_CSC846Justin Cornwell2025-08-06
213'781vmdetectnex2025-08-06
174'143NETmalware-lu2025-08-06
164'735DebuggerCheck__API2025-08-06
159'231FreddyBearDropperDwarozh Hoshiar2025-08-06
111'230DetectEncryptedVariantsZinyth2025-08-06
108'142SEH__vba2025-08-06
107'998pe_detect_tls_callbacks2025-08-06
96'914UPXV200V290MarkusOberhumerLaszloMolnarJohnReisermalware-lu2025-08-06
83'011Sus_CMD_Powershell_UsageXiAnzheng2025-08-06
78'165UPXv20MarkusLaszloReisermalware-lu2025-08-06
76'753classifiedclassified2025-08-06
72'620classifiedclassified2025-08-06
69'284MD5_Constantsphoul (@phoul)2025-08-06

ClamAV Most matching ClamAV signature


ClamAV signature that matched most on files scanned on YARAify in the past 14 days.

Task countClamAV SignatureLast match
293'380PUA.Win.Packer.Lccwin-22025-08-06
197'434Win.Trojan.Obfus-382025-08-06
176'512SecuriteInfo.com.BackDoor.HangUp.43914.UNOFFICIAL2025-08-06
137'655Win.Malware.Qukart-6838239-02025-08-06
135'875Win.Trojan.Padodor-10016488-02025-08-06
135'875Win.Trojan.Qukart-6874817-02025-08-06
115'922SecuriteInfo.com.BackDoor.HangUp.44049.10213.32330.UNOFFICIAL2025-08-06
115'860Win.Trojan.Padodor-9877164-02025-08-06
74'022SecuriteInfo.com.BackDoor.HangUp.43791.UNOFFICIAL2025-08-06
72'565SecuriteInfo.com.BackDoor.IRC.Tdongs.13538.21428.UNOFFICIAL2025-08-06
49'432Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-02025-08-06
47'775Win.Packed.Generickdz-10022900-02025-08-06
41'878Win.Trojan.Packz-10033592-02025-08-06
40'793Win.Packed.Generickdz-10020556-02025-08-06
40'643Win.Trojan.Berbew-9845290-12025-08-06

Most seen files


Most seen files scanned by YARAify in the past 14 days.

Task countSHA256 hashLast seen
1'68688c86e57c23bb7f7b8f4ba71837b49fa92cb1c1d1f1f7758ee8a145c554ea7952025-08-01
1'37828c342e95eeef9f987b3ca1e138679e18a2fd528f6f12c12b1c5f35f30f3fdfb2025-08-01
950f1330ebcf5e74383a7a94a279d81a66a8fde5526541ddaba2c8d35428052cc102025-07-24
88603121ce6f07e608ad8489fec166c13a392397c6d8e015c83ea204f6d48bd25e72025-07-30
8853e0ad9ddf44a6382bb14050bdfb1721b6597d058c5ea7499f016a305dca0357e2025-07-30
834482d088f94a1456ef0a30a7a96b0929d821b82c6170e69f12cbac52f267265572025-07-23
768beb58a4a292dba6398bb009d56fc841692b16fac336ef0ce5131350522d2fba52025-07-22
74314cfc5fd26436a2e13ee7fe8a8d934e0754577b958c725930d8d6f987f8532b32025-07-21
727e903adcc1808579f74a98f1199cc189f4c5d90a93b3da7cb9ff17c5cf0cf4d112025-07-22
690194b83abd85d8b85cefaeb826e0b643308247962ee86c7fc36b8cc29256e144f2025-07-22
6605e363b9fb3f6134a68a9f124e330e6d5817f7bc4bd6eeb3d6da74f41db89b35d2025-07-19
660ac5cb6e23b989a183369a7bebbe2c9cab407fdeffa1d89aa3933d281c4399fa52025-07-19
61881ec61a49b5fcc4e696974798b5e0d3582a297e9c6beaf95d56839b514e064f52025-07-21
5809e1c3dd33974b68eb1f977ad9ccc804a0a95227219d5304648611d420ae9713b2025-07-21
15592c38a7cdb9673fe1f9d6b1b83848483217141d8f413de969a717230749ecc552025-07-22

Top dhash icon


Top dhash icon observed on files scanned by YARAify in the past 14 days.

Task countdhash iconLast seen
15'73500ccc4d0c4fc7c002025-08-07
14'968e9f4aa8accc6c6642025-08-07
11'09304ccfee2ece4a4842025-08-07
10'2091003873d31213f102025-08-07
9'9361003873db9313e102025-08-07
7'99469ccd4d49696cc712025-08-07
5'865e8b03c727a9ad0e82025-08-07
5'198399998ecd4d46c0e2025-08-07
5'163e0f0e48c8ca4c0e02025-08-07
3'323f4b484ece0f0d8602025-08-07
3'09700000000000001022025-08-06
3'04300ccc4d0c4fcfc452025-08-07
2'9121003873db9313e162025-08-07
2'64518b1b1b17068c8802025-08-06
2'538b67ee8c2f2f0711a2025-08-06

Top imphash


Top imphash observed on files scanned by YARAify in the past 14 days.

Task countimphashLast seen
104'78146f03ef2495b21d7ad3e8d36dc03315d2025-08-06
36'647c9246f292a6fdc22d70e6e581898a0262025-08-07
35'6734dcbc0931c6f88874a69f966c86889d92025-08-07
30'8883f8d79e42b0b7cecf379b1ddce4e422a2025-08-07
23'6246db997463de98ce64bf5b6b8b0f77a452025-08-07
20'96187914047e74de74a89c530e3bb19409e2025-08-07
19'511f34d5f2d4577ed6d9ceec516c1f5a7442025-08-07
18'8972640d4b5d04a2d6756ecdf3ec765cc1a2025-08-06
12'28709d0478591d4f788cb3e5ea416c252372025-08-07
11'9072c2ad1dd2c57d1bd5795167a7236b0452025-08-07
9'7138abecba2211e61763c4c9ffcaa13369e2025-08-06
9'100dae02f32a21e03ce65412f6e56942daa2025-08-07
8'796aa77d18b40072a7e1dc36630aafffd272025-08-06
8'6805d6cad172c5535e4b6b6bbd2465716212025-08-07
8'02258708828d5c31968bd59859804ecde672025-08-07

Top tlsh


Top tlsh observed on files scanned by YARAify in the past 14 days.

Task counttlshLast seen
1'687T12B63029CB75E802ADC526B3436A432069B3C78B37451553D2E1833918D81DB633EADAF2025-08-01
1'378T173A25B1CA009D439DA9781DBFE2A76B5711DF30642D8A8D37D2E4E060A97FD8F85E4832025-08-01
1'271T116A2BF51A5881CDCF267C7F7BB5F3043ED693A02A6DCC4E6246EC6874481E1BD64AF122025-08-04
886T17A54127B84CDD09DBCD3A3E0BF416B495AECE34ADCE950BA38D809866C51D85AFCC0552025-07-30
885T12DB4D0079C58CF879169C3E8BF131EAC5F5B2B0D99817AFF10261E9B3E206161DDA05E2025-07-30
808T1E8449D7BFCC24899EB4606376272AEC572F23ED802D463DE4329689FCB7A5E874434152025-08-05
625T18934DF4CE858D48C58FBDFDAD70AF9D0860EA3535AC489FA361F4F820E13D9DEA568412025-07-24
264T190C46C2AA4604176E4F5213121FE7A672CBD2E6443ED24D377A05E8D6DA41F3B2381EF2021-11-18
164T14013BE76D8D92C8DFCE3C3C451B23A5D4A3DB103CEDCBC8270A8060AED15D54AB926A72025-08-08
162T1C5D66B68E683D8F6DC4207754087BAAF22B8A770C779CE27DA046C58DB37E9645373062025-07-20
146T14FD66B68E683D8F6DC4207754087BAAF22B8A770C779CE27DA046C58DB37E9645373062025-07-15
142T1B5033E9736E31000FB09BE35C654834FEF06CF59B97A9B4ED39826C72371A78629E0592022-02-07
140T160030B9736E31000FB09BE32E554C24FEF06CF59B976974ED39826C72350A78662E45B2022-02-07
140T13A03389736E31100FB08FE32C554838FEF86CF69B976974AD79826C72350A78621E45E2022-02-08
140T133E48D51F185C076E0F116B0A6FE7A5B146C2975471D38E3EB98BEC929740F27A3C28B2021-08-11

Top telfhash


Top telfhash observed on files scanned by YARAify in the past 14 days.

Task counttelfhashLast seen
70t1ffe02b91ea7c0a6dcee30c74dc9a66a39043617690506e15ef6aedd4c03f406f218d2f2025-08-03
69t143317b2549144a219f92c9a598f9b7a3102ca749ea0dae36de35480c70240fef17be4f2025-07-29
68t1c5f05945aa3d4aafcee30c34cc9a6b93a043a03690529d15ef15eed4803f906f218d1f2025-08-06
40t178310071567851269aa1ec64d9ed97b2652ac7171340ff32df26c0cc281a449f62ac0f2025-08-02
40t10751b1fa6dba08ecfbd0a804c75e5bd33669ca7b153025b0406398b532f79954475c3a2025-08-02
39t14e21324271f68a282bb385245cbc03b5264665232341bf756f0ec5c45837012a534dcb2025-07-27
38t11bf05500fdb9ca2d98e79a70ccad4624a403122350324b10cf04dae09c3f450f708eae2025-08-07
37t1ec317a154a144a21af92d9a598f9b7a3116ca749aa0dae32df35480c70240fee17be4f2025-07-29
35t12a21419271f6ca2d3bb389746cbc43b52642b5132741bf75af0ec5c45833052a924ecb2025-07-27
34t1bbf02795aa7d4aaacef30c74cca967939043a03690415e26ef55eed4c03f906f218d2f2025-08-04
32t17df0e480ea3d8b0e46e20970c8680ba1a193922790328321efa0d9c09c3f01af118e2e2025-08-05
32t17951bbb0399939d8a2fbfb37730be9a45cb50a6015e172d1ceb769e2de417840cb14632025-08-02
31t1d931217153a8552699a1ec24d8fd8bb2752fc7171354ff36de26c0cc241e04ae526c0f2025-08-07
31t11fe07d00ec754b1c54cb6974ac8c06b09601222260570b00cf10daf4c83f440e30c94a2025-08-03
30t171f04c80ef7d4b5c4da19a35dc9c1b9198079116a1325b30ff64cde0883e059f74cd1e2025-07-25

File Scans


The chart below shows the number of file scans conducted by YARAify over the past 12 months.

Data Scanned


This chart shows the amount of data scanned in Megabytes over the past past 12 months.

API requests


The illustration below documents the number of API requests over the past past 12 months.

Most matching YARA rules


YARA rules that matched most on files scanned on YARAify in the past 12 months.

Task countYARA RuleAuthorLast match
50'169'597Sus_Obf_Enc_Spoof_Hide_PEXiAnzheng2025-08-06
5'430'502SEH__vba2025-08-06
5'047'143DebuggerCheck__API2025-08-06
4'642'823golang_bin_JCorn_CSC846Justin Cornwell2025-08-06
4'609'620Detect_APT29_WINELOADER_Backdoordaniyyell2024-09-24
3'259'703NETmalware-lu2025-08-06
3'258'776pe_detect_tls_callbacks2025-08-06
3'168'451vmdetectnex2025-08-06
2'624'374UPXV200V290MarkusOberhumerLaszloMolnarJohnReisermalware-lu2025-08-06
2'393'675RANSOMWAREToroGuitar2025-08-06
2'328'583RansomPyShield_AntiransomwareXiAnzheng2025-01-04
2'118'625UPXv20MarkusLaszloReisermalware-lu2025-08-06
2'114'056MD5_Constantsphoul (@phoul)2025-08-06
1'908'078maldoc_getEIP_method_1Didier Stevens (https://DidierStevens.com)2025-08-04
1'886'671meth_get_eipWilli Ballenthin2025-08-04

ClamAV Most matching ClamAV signature


ClamAV signature that matched most on files scanned on YARAify in the past 12 Mmonths.

Task countClamAV SignatureLast match
32'600'172PUA.Win.Packer.Lccwin-22025-08-06
21'672'009Win.Trojan.Obfus-382025-08-06
21'468'019Win.Trojan.Qukart-6874817-02025-08-06
21'394'056Win.Trojan.Padodor-10016488-02025-08-06
17'745'694Win.Malware.Qukart-6838239-02025-08-06
6'296'018SecuriteInfo.com.BackDoor.HangUp.43874.UNOFFICIAL2025-08-06
5'338'428Win.Trojan.Berbew-9845290-12025-08-06
4'726'555SecuriteInfo.com.BackDoor.HangUp.43791.UNOFFICIAL2025-08-06
4'627'880Win.Trojan.Padodor-9877164-02025-08-06
3'585'562Win.Malware.Midie-6847981-02025-06-22
3'486'402Win.Dropper.Ajku-10014126-02025-08-06
3'275'846Win.Trojan.Barys-10005825-02025-08-06
3'125'763Win.Malware.Generickdz-10004857-02025-08-06
3'058'731Win.Malware.Midie-6848630-02025-08-06
3'024'902Win.Malware.Midie-6847894-02025-08-06

Most seen files


Most seen files scanned by YARAify in the past 12 months.

Task countSHA256 hashLast seen
8'910e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b8552021-07-12
4'5795ddfdd55fac3a23673a52fb3a75bed7dee266fb6fc8b10ced3746ab43064aef52025-03-12
3'50423c2d2b0c6cec3e69cb07f942c9e56f2087aeb24015be25823897faafc4708ae2022-02-07
3'49769c88b4d5ea84620d1b762d5119fe9293c34e68268e7006cb503b865e963b2512021-07-09
3'483ebd6320e24d47c0d638749a149f14f4c94b1c98afa228dba1f48eea19a2c72572021-07-09
3'475e0af7f483f4965dca90eb5921ae004a7e41593b39284a63af97a9105b96718e72022-01-06
3'4745ea4d94c695189639e9ab7afe8d76d231030921fbfdd95e1941c7c0a05fb8f032022-02-07
3'47239e48a3fc7e67968ff5d6e3cf8e12a7256af93ccabbce4da20d28c79237d95e82022-01-06
3'4691115b6c913a207b9d81f8482613b2a9c2929ca81399861d2d2c47422e244060d2022-02-07
3'463b3986e04464339cec16157cf8c8bffec3a8a8c5eae57997974d45f5369fa16552021-07-07
3'42787479e089e6852958dab4026e07bc01ed1f31af423b1d26db462ef7493a537f12022-02-08
3'41353c22863323c0f5ff94f4ae86df27a51db4eae7232cc38333346ee8be9df5aa62022-02-07
3'41132996a04eeead4de0813ca803033429fd38e0aa4ab8d603508e1d2c6bd38aba72022-02-08
3'3528718400c6ca71b5afb0534931628b2aace3e5cc515edaa33d1da678f947b5cd42022-02-08
3'348c8c158269c68d6b09d0c8b118b6588302816f2936c193579b35512d6a6af506e2022-02-08

Top dhash icon


Top dhash icon observed on files scanned by YARAify in the past 12 months.

Task countdhash iconLast seen
2'049'15218b1b1b17068c8802025-08-06
748'37758b1b1b17068c8802025-08-06
407'20600ccc4d0c4fc7c002025-08-07
356'4531003873d31213f102025-08-07
281'8621003873db9313e102025-08-07
279'65504ccfee2ece4a4842025-08-07
210'608d8d0d4d8ececece42025-08-02
152'09669ccd4d49696cc712025-08-07
99'295e9f4aa8accc6c6642025-08-07
99'119526e32661e3a2a102025-08-07
87'436b298acbab2ca7a722025-08-07
80'186e0f0e48c8ca4c0e02025-08-07
61'13871e8d4968ecc68f92025-08-02
58'680818da080a0a0a0a22025-08-07
55'681399998ecd4d46c0e2025-08-07

Top imphash


Top imphash observed on files scanned by YARAify in the past 12 months.

Task countimphashLast seen
8'052'0166db997463de98ce64bf5b6b8b0f77a452025-08-08
6'008'9754dcbc0931c6f88874a69f966c86889d92025-08-08
4'810'00046f03ef2495b21d7ad3e8d36dc03315d2025-08-08
4'690'381c9246f292a6fdc22d70e6e581898a0262025-08-08
3'133'4685d6cad172c5535e4b6b6bbd2465716212025-08-08
1'407'5093f8d79e42b0b7cecf379b1ddce4e422a2025-08-08
1'137'97987914047e74de74a89c530e3bb19409e2025-08-08
854'877e4742a62fda2e64b586a5b84efe3f0402025-08-03
617'2692640d4b5d04a2d6756ecdf3ec765cc1a2025-08-08
491'868f34d5f2d4577ed6d9ceec516c1f5a7442025-08-08
331'22591f4b88d25daa33c7443253d9beb1bb32025-08-08
292'142dae02f32a21e03ce65412f6e56942daa2025-08-08
184'449c06ddfbe3366daddf0cfd3e63c1b53902025-08-08
172'6182c2ad1dd2c57d1bd5795167a7236b0452025-08-08
143'33688478c1f74f94f7e1e9654193a1e02b32025-08-08

Top tlsh


Top tlsh observed on files scanned by YARAify in the past 14 months.

Task counttlshLast seen
3'504T1B5033E9736E31000FB09BE35C654834FEF06CF59B97A9B4ED39826C72371A78629E0592022-02-07
3'500T138118CABCBE6ACF1C80C10B4070B8D013674883443E1C3170EA5007E7CA22FCD8B6E022021-07-09
3'485T1CCE2F87B94C24337C001EFB60B95C9AEBB736D306564C0E32BD42B1F892B9687D5D4692021-07-09
3'480T160030B9736E31000FB09BE32E554C24FEF06CF59B976974ED39826C72350A78662E45B2022-02-07
3'478T153819E61842314C4F557CFF0D61BD82AAFA5334684584E1123E0606A4BCF60427041E32022-02-07
3'475T10016DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
3'472T1EF16DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
3'463T1C8E052F688E090AC080023A82BDF2CA5437B03BD00202A0BF20BA04D022DF72E30A3F02021-07-07
3'437T1D7819E61842314C4F557CEF4D51BE869BFA5734550584E1423E0705A4BCBA1427551A32022-02-08
3'421T13A03389736E31100FB08FE32C554838FEF86CF69B976974AD79826C72350A78621E45E2022-02-08
3'415T1BD812B4525A230CAC056C270ED52C158ABD9BC37AF44D3BBF1B90FDD83112451CC1B0B2022-02-07
3'355T1A58162A0432FB74ADC5680B151DEA0E16667707204E5CA0551C916ADDB829F0EF74C332022-02-08
3'352T10E8132A0832FBA4ADC96847151DEE1E16667307604E5C50161DA26DEDB83AE4EF78C332022-02-08
3'350T1DD816250432BB64AEC9A84B0409EA1E13657217214F2C91161CA66DC8B82AF4AF68C332022-02-08
3'347T1688141C1405F2A7CF2ED8ABCA20506C43D46B4B324754D651184782DAA23E4C7722A332022-02-08

Top telfhash


Top telfhash observed on files scanned by YARAify in the past 12 months.

Task counttelfhashLast seen
5'724t126f09018093456e197116ec8673dff7ad56220ef6a055e378f00fda79b699426e10c0c2025-06-05
1'754t10ab0011070740bb84308e12d5cdcae5679f20cc3fe470c27db6047a159b54434d00d182025-07-15
1'698t186c08c8c0fd401beba7d72a203bef2bf61a072f0be0224920404eb6f074c584028144c2025-07-15
1'220t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aacd2025-07-18
477t13611d04270b6891d2bb659245cbc42b5165536236381be75bf0ec5c45537002ba79e8b2025-07-20
412t178310071567851269aa1ec64d9ed97b2652ac7171340ff32df26c0cc281a449f62ac0f2025-08-02
402t10751b1fa6dba08ecfbd0a804c75e5bd33669ca7b153025b0406398b532f79954475c3a2025-08-02
364t1564165181e7817b063356c4e159cef3b96a320db7e176c378e51e86aab699835d10c0c2025-08-02
361t1e1d0a7d19e681c48e9f4805dc4ef61679340b5d17f1494877df16d029a320c9703110e2025-08-02
355t12e11401a8f942e4eaff4000e869ea21b547075592f2b78538c2a752b93831c2f06dc532025-08-02
342t17951bbb0399939d8a2fbfb37730be9a45cb50a6015e172d1ceb769e2de417840cb14632025-08-02
328t173111069cfd8159e2fe08244e15db44e9a74726d1f6735925d756a8fd1428e3306cc202025-08-02
310t157110e13a0b9ca282bf348249dbc07f005502b23a782be71bf0ac5c49437002a875d9b2025-04-20
295t1d211020260b689282bb259205cbc42f1165526233341be75bf0ec5c4993b002aa78e8b2025-07-20
287t1fe11104270b6891c2bb259245cbc42b0165532232381be74bf0ec5c05937002ba79e8b2025-07-20