Statistics

YARAIfy produces various statistics on files scanned by YARAify, including their detections. The available statistics can be found below.

File Scans


The chart below shows the number of file scans conducted by YARAify over the past 30 days.

Data Scanned


This chart shows the amount of data scanned in Megabytes over the past 30 days.

API requests


The illustration below documents the number of API requests over the past 30 days.

Most matching YARA rules


YARA rules that matched most on files scanned on YARAify in the past 14 days.

Task countYARA RuleAuthorLast match
155'672meth_get_eipWilli Ballenthin2023-01-28
83'316pdb_YARAify@wowabiy3142023-01-28
54'263QbotStuffanonymous2023-01-28
44'926TeslaCryptPackedMalware2023-01-28
34'122command_and_controlCD_R0M_2023-01-28
32'835BitcoinAddressDidier Stevens (@DidierStevens)2023-01-28
32'223INDICATOR_EXE_Packed_MPressditekSHen2023-01-28
31'340shellcodenex2023-01-28
28'016pe_imphash2023-01-28
28'016Skystars_Malware_ImphashSkystars LightDefender2023-01-28
24'146yara_template2023-01-28
20'249AsyncRat_Detection_Dec_2022Potatech2023-01-23
19'060extracted_at_0x44bcb2023-01-28
18'015meth_stackstringsWilli Ballenthin2023-01-28
17'461Disable_Defenderiam-py-test2023-01-28

ClamAV Most matching ClamAV signature


ClamAV signature that matched most on files scanned on YARAify in the past 14 days.

Task countClamAV SignatureLast match
44'110PUA.Win.Packer.Pequake-42023-01-28
27'150Win.Dropper.Tinba-9943147-22023-01-28
23'828PUA.Win.Packer.Lccwin-22023-01-28
19'860Win.Malware.Midie-9878132-02023-01-27
16'255PUA.Win.Packer.AcprotectUltraprotect-12023-01-28
13'230Win.Trojan.Qukart-6874817-02023-01-27
13'211Win.Trojan.Obfus-382023-01-27
10'879PUA.Win.Packer.Embedpe-32023-01-28
10'648Win.Malware.Convagent-9979654-02023-01-27
10'159Win.Malware.Qukart-6838239-02023-01-27
9'803PUA.Win.Packer.Ep-72023-01-28
9'566Win.Trojan.Berbew-9845290-12023-01-27
9'162Win.Trojan.Crypted-302023-01-27
9'055Win.Trojan.Crypted-292023-01-27
8'113Win.Malware.Scar-9946848-02023-01-27

Most seen files


Most seen files scanned by YARAify in the past 14 days.

Task countSHA256 hashLast seen
14139e48a3fc7e67968ff5d6e3cf8e12a7256af93ccabbce4da20d28c79237d95e82022-01-06
14023c2d2b0c6cec3e69cb07f942c9e56f2087aeb24015be25823897faafc4708ae2022-02-07
14053c22863323c0f5ff94f4ae86df27a51db4eae7232cc38333346ee8be9df5aa62022-02-07
1405d2c578c6f0fe65a39e920bf03b5023ca0ace5efa80c316f7f454067cfea87b32021-07-07
140e0af7f483f4965dca90eb5921ae004a7e41593b39284a63af97a9105b96718e72022-01-06
140e19b0ba085a6c6f754df5f6f3a2ad8d490eafb62ad14606a943e7de2d0e3e03f2021-07-07
1405ea4d94c695189639e9ab7afe8d76d231030921fbfdd95e1941c7c0a05fb8f032022-02-07
140b3986e04464339cec16157cf8c8bffec3a8a8c5eae57997974d45f5369fa16552021-07-07
138c25bd3702ca723b9b9427079397e4f5905e2f3a9ef86810a694be4faa8cb32c32021-07-07
1378c251ccc6eb0591c58ad3337729bcce081d8d65557523d21a6aee9cd6523d59f2022-02-07
1355b4e0789ff538844a269908318fa14ee7aa741cc8827f99f071a5025791e7ca42023-01-10
1352f5c01c2c31e698570eb80d2673b7205da4861825d0b7423f61208eda2a4edb02022-02-07
134891b76b65aba597896d0e3cf214ab29b3090c12f0fb32fb2ae96731b410ce44b2022-12-18
1341115b6c913a207b9d81f8482613b2a9c2929ca81399861d2d2c47422e244060d2022-02-07
1333c3f88396262f02633e1ec2b67cde0461b4c0f9c7d7b88bd985953747c3802fc2022-12-19

Top dhash icon


Top dhash icon observed on files scanned by YARAify in the past 14 days.

Task countdhash iconLast seen
1'0069919aca682a881a92022-07-23
16869ccd4d49696cc712023-01-08
157414555c0d4d445032022-10-31
156338be5f1f1a9adb72022-07-23
118b9e8f2f0ac9bd8da2023-01-16
6574f4c898b6b698d02022-07-22
52e8dc988898a8a4902022-07-23
43b298acbab2ca7a722023-01-24
4130f8d492d0d879b22022-03-31
2730f0c4ccccf0d8da2022-07-22
25c883a69c94a683c82023-01-16
24e1c47c9edecc7c1e2022-07-23
1996136944dd4937962022-07-23
18c1c0e0c88c8ccce82023-01-18
17b3a9f236b662e8c92022-03-30

Top imphash


Top imphash observed on files scanned by YARAify in the past 14 days.

Task countimphashLast seen
27'993f34d5f2d4577ed6d9ceec516c1f5a7442023-01-28
27'681dae02f32a21e03ce65412f6e56942daa2023-01-28
19'020a12d186f65c99f872323a61923ce70d82023-01-27
9'776691f1193f16065947032ace3a2329e552023-01-27
9'495c9246f292a6fdc22d70e6e581898a0262023-01-27
8'9856ed4f5f04d62b18d96b26d6db7c188402023-01-27
7'935d8b32e731e5438c6329455786e51ab4b2023-01-27
6'1742c2ad1dd2c57d1bd5795167a7236b0452023-01-27
5'6286db997463de98ce64bf5b6b8b0f77a452023-01-27
5'5193d76acaa0ea7f33b32e74149aa1f88482023-01-27
4'4534dcbc0931c6f88874a69f966c86889d92023-01-27
4'05413a2c92bc35f6b39c05c4bc4151b1b052023-01-27
3'642edb3364b5679833ecb709989cf3d6e1b2023-01-26
3'532f481ea8169d367d8b0e94d0bf02da2202023-01-28
3'269e836076a09dba03e4d6faa46dda0fefc2023-01-27

Top tlsh


Top tlsh observed on files scanned by YARAify in the past 14 days.

Task counttlshLast seen
141T1EF16DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
140T192D002F380E0149A4460331317DF1D451B5F136DB78A2613F83D7E84432093A37539712021-07-07
140T1B5033E9736E31000FB09BE35C654834FEF06CF59B97A9B4ED39826C72371A78629E0592022-02-07
140T1C8E052F688E090AC080023A82BDF2CA5437B03BD00202A0BF20BA04D022DF72E30A3F02021-07-07
140T160030B9736E31000FB09BE32E554C24FEF06CF59B976974ED39826C72350A78662E45B2022-02-07
140T10016DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
140T1BD812B4525A230CAC056C270ED52C158ABD9BC37AF44D3BBF1B90FDD83112451CC1B0B2022-02-07
140T18CC048F380E010420460231313EF1E452B5F235C77462623F42C7D808320A3A37A39722021-07-07
138T179E06CFA88EC219D5A80435517DF6DB4976B02BD18263813F530928D831DB76E6633B62021-07-07
137T1F9033F8736E31004BB09BE35C754834FEF46CF59B97A9B4ED39826C72370A78629E0592022-02-07
135T160E2E10E7D02F8BDF56960FB4942CEA2D554DFEE0856B014B78B1DA5ACA9C31B8073642023-01-10
134T120549D1175B0CD73C4B6203F45928A255A2F28214B6AB5D7B79B2BED5E307E0B2371CB2022-12-18
134T153819E61842314C4F557CFF0D61BD82AAFA5334684584E1123E0606A4BCF60427041E32022-02-07
133T138118CABCBE6ACF1C80C10B4070B8D013674883443E1C3170EA5007E7CA22FCD8B6E022021-07-09
133T123E2D1D90EB170FEC1C48DB964D25D3F6FA5A5E01109BF4248A6CC32287BDA3B46A35D2022-12-19

Top telfhash


Top telfhash observed on files scanned by YARAify in the past 14 days.

Task counttelfhashLast seen
4t11701ce5370ba89592bf308285cbd53f425802a236792fe75bf0dc9d05837002f974d8b2023-01-18
4t1b801ab5370ba89592bf208285cbd57b425806a236792be75bf0dc9d05837002b964d8b2023-01-18
3t14e11ef4321ba892c6bf758245cbc47b1295626233352be70af09c584993b007b979e8b2023-01-17
3t18421fe46a1f6856d2ff368345dbc46b5188227133361bf70af0985c01c7b002a936ecb2023-01-19
3t176319c61903556182fb3da28acbd56b316222b1353583f715f26c0cc04370e2ea39d5f2023-01-25
3t11f514301487b4a391b61d8289c6d36a9556e331be6141db0df79c9d831320e3e97fe4a2023-01-23
3t13611d04270b6891d2bb659245cbc42b5165536236381be75bf0ec5c45537002ba79e8b2023-01-19
3t171217622513542182fb3d928acbd567315222b2363597f716f26c4cc49370e2e93ad4f2023-01-21
3t14f212346e1fa8a295ff379249dbc46b5089217273251af756f1a81c01cbb002a93adcb2023-01-23
3t195317722553546142fb3d928acfd56b315222b2363587f716f26c48c49370e2e93dd4f2023-01-21
3t166115158493863f0d7b11cdd6bedeb75e46170ea0a216e378d00e96e9a5d5018d00c2c2023-01-14
3t17251420148bb463d1b61982c9c6d36b9556d3307e6141db4ef79c9d831320e3e97fe4a2023-01-23
3t15821e2bf1e6709fcb3c4a898c32b62931679d273056132b401b3ad9923f2ec05169d3a2023-01-17
3t10e214242e1fa862d1ff328349dbc46b5085213233361bf746f0a80c01c7b002a936dcb2023-01-23
3t11111ed4321ba855c2bf718345cbc47b1295226232792be70af09c5c44937002ba79e8f2023-01-17

File Scans


The chart below shows the number of file scans conducted by YARAify over the past 12 months.

Data Scanned


This chart shows the amount of data scanned in Megabytes over the past past 12 months.

API requests


The illustration below documents the number of API requests over the past past 12 months.

Most matching YARA rules


YARA rules that matched most on files scanned on YARAify in the past 12 months.

Task countYARA RuleAuthorLast match
2'260'314meth_get_eipWilli Ballenthin2023-01-28
1'410'722pdb_YARAify@wowabiy3142023-01-28
869'666BitcoinAddressDidier Stevens (@DidierStevens)2023-01-28
659'650Skystars_Malware_ImphashSkystars LightDefender2023-01-28
659'650pe_imphash2023-01-28
556'316crime_win64_emotet_unpackedRony (r0ny_123)2023-01-25
528'704classifiedclassified2023-01-28
421'764command_and_controlCD_R0M_2023-01-28
411'110win_heodo2023-01-25
401'969meth_stackstringsWilli Ballenthin2023-01-28
368'993QbotStuffanonymous2023-01-28
359'497exploit_any_poppopretJeff White [karttoon@gmail.com] @noottrak2022-06-22
354'433win_sality_autoFelix Bilstein2023-01-28
329'020INDICATOR_EXE_Packed_MPressditekSHen2023-01-28
326'372extracted_at_0x44bcb2023-01-28

ClamAV Most matching ClamAV signature


ClamAV signature that matched most on files scanned on YARAify in the past 12 Mmonths.

Task countClamAV SignatureLast match
738'129PUA.Win.Packer.Upx-42022-10-27
526'751PUA.Win.Packer.Lccwin-22023-01-28
468'986Win.Trojan.Qukart-6874817-02023-01-27
456'136Win.Malware.Zusy-6878655-02023-01-27
438'642PUA.Win.Packer.Asprotect-32023-01-28
429'661Win.Malware.Midie-6847981-02023-01-27
427'467Win.Malware.Midie-6847893-02023-01-27
378'804Win.Malware.Midie-6848630-02023-01-27
373'612Win.Malware.Midie-6847894-02023-01-27
368'674PUA.Win.Packer.Pequake-42023-01-28
363'095Win.Malware.Midie-6848784-02023-01-27
363'095Win.Malware.Midie-6847892-02023-01-27
325'795Win.Malware.Qukart-6838239-02023-01-27
322'923Win.Trojan.Obfus-382023-01-27
266'362Win.Virus.Wapomi-1382022-11-09

Most seen files


Most seen files scanned by YARAify in the past 12 months.

Task countSHA256 hashLast seen
150'031bfc6bff6a3be4c198b51f7ac0a28a8b61baaadbffcdcca8f25ef35b616c53cc52022-07-14
120'1372d93837ee387916c4a6060912fcb2b9fdaa836f419d2a038500299b376b5fbcd2021-07-08
120'11123c2d2b0c6cec3e69cb07f942c9e56f2087aeb24015be25823897faafc4708ae2022-02-07
115'8911665e0d57f7f62035a0f720ca385a82a27502283bf131d1628c877159e79a2102021-07-08
50'8355881513fca390bfea60468b7b8085da7448efeeca39f52c8ac56745024afe2692021-07-08
37'1945ea4d94c695189639e9ab7afe8d76d231030921fbfdd95e1941c7c0a05fb8f032022-02-07
31'020e19b0ba085a6c6f754df5f6f3a2ad8d490eafb62ad14606a943e7de2d0e3e03f2021-07-07
26'36176cf234b9b0004e3c87633ebf8ff38a175576bc9baa6f34d863fc8eef0fa50b72022-01-28
25'487e0af7f483f4965dca90eb5921ae004a7e41593b39284a63af97a9105b96718e72022-01-06
25'41039e48a3fc7e67968ff5d6e3cf8e12a7256af93ccabbce4da20d28c79237d95e82022-01-06
24'679cf581ab47fabfc401ebca29130781037fb56b3bc54515f845f6f26bb4cbf96702022-06-08
23'6585d2c578c6f0fe65a39e920bf03b5023ca0ace5efa80c316f7f454067cfea87b32021-07-07
23'642daf3d4175396ad0f2d639ea6dcfb166d701cdce5fd545fe3a320a88bd267ec7e2022-05-12
23'34853c22863323c0f5ff94f4ae86df27a51db4eae7232cc38333346ee8be9df5aa62022-02-07
23'091e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b8552021-07-12

Top dhash icon


Top dhash icon observed on files scanned by YARAify in the past 12 months.

Task countdhash iconLast seen
86'33237373339294935872022-07-23
61'8509919aca682a881a92022-07-23
41'791399998ecd4d46c0e2022-12-09
29'980e94a6e71e932f0332022-07-23
27'893e0e4a2aaa4b8a8882022-07-23
27'015d0c4a2a2a4bcbcb82022-07-23
21'73671b119dcce5763332022-11-10
20'938c271cc9cae8de9722023-01-01
18'5461003873d31213f102023-01-16
17'3591ad2a38edcb6b2dc2022-07-23
14'603338be5f1f1a9adb72022-07-23
14'297818da080a0a0a0a22022-12-23
13'323f8fcec9e8e88c0e82022-10-13
13'11330d4f0e8ccdcf0712022-07-23
10'02300ccc4d0c4fc7c002022-07-23

Top imphash


Top imphash observed on files scanned by YARAify in the past 12 months.

Task countimphashLast seen
606'013f34d5f2d4577ed6d9ceec516c1f5a7442023-01-28
371'096dae02f32a21e03ce65412f6e56942daa2023-01-28
221'426be6fa16f501de575a1d8eaaac5246ba02023-01-27
188'21868d9776cadfeba9a6849d2f603b34a8f2022-11-09
173'3308abecba2211e61763c4c9ffcaa13369e2023-01-27
157'647e4742a62fda2e64b586a5b84efe3f0402023-01-26
141'3406db997463de98ce64bf5b6b8b0f77a452023-01-27
113'731a12d186f65c99f872323a61923ce70d82023-01-27
98'2302c2ad1dd2c57d1bd5795167a7236b0452023-01-27
94'551ed86c2ba483c37b0e2cfeecbd5fca8762023-01-27
62'4235271d5ce8b44dd47bc92563e275854662023-01-27
61'504b87b5fb150cfc5c490bcca7572133d9f2022-11-09
61'039359d89624a26d1e756c3e9d6782d6eb02023-01-27
58'8455c7397fd7c1832e37a3cb00b6ee7c3772023-01-27
58'80184706849fa809feaa385711a628be0292023-01-27

Top tlsh


Top tlsh observed on files scanned by YARAify in the past 14 months.

Task counttlshLast seen
120'111T1B5033E9736E31000FB09BE35C654834FEF06CF59B97A9B4ED39826C72371A78629E0592022-02-07
37'194T160030B9736E31000FB09BE32E554C24FEF06CF59B976974ED39826C72350A78662E45B2022-02-07
31'020T18CC048F380E010420460231313EF1E452B5F235C77462623F42C7D808320A3A37A39722021-07-07
26'361T192E35A11F39381F3DC9608F219B6B22FDF7D0E036164DEA593981F57ADB2245A2B981C2022-01-28
25'487T10016DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
25'410T1EF16DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
24'701T129F36C24E84345E7F87B1932D0077A2FD4647D295220EE7BD954CE9AFF22B14A20F25E2022-06-12
23'658T192D002F380E0149A4460331317DF1D451B5F136DB78A2613F83D7E84432093A37539712021-07-07
23'642T173045B65E49345E7F8BB0872904A7B5FD8242D41D210DE3F9554CEDABF22B25A20F22F2022-05-12
23'348T1BD812B4525A230CAC056C270ED52C158ABD9BC37AF44D3BBF1B90FDD83112451CC1B0B2022-02-07
19'464T1EDD34B11F7C341F3DC9608F169B6A22FDFB90E137064DEA587A81F576CB2605A2B990C2022-01-28
18'971T189E35910F79381F3DC960CF225B2B22FDF6D1E036164EEE583A41F57ADB2245A26994C2022-03-07
16'961T1B873119B3ADC5DD1D0840B3818F5C52B4EA1F9B8029E8F3661C0A56F5DDD68A093C7B12022-04-26
15'502T161F37C24E55354EBF9B70832D4073B0FD8642D155210AE7FE6588ED7AF22B22A21F25F2022-06-08
15'362T1C8D0C9F088E8101C6412373657CF6CCD034317321A02A917F9262429B160AB743C33EA2022-07-06

Top telfhash


Top telfhash observed on files scanned by YARAify in the past 12 months.

Task counttelfhashLast seen
156t13611d04270b6891d2bb659245cbc42b5165536236381be75bf0ec5c45537002ba79e8b2023-01-19
148t171217622513542182fb3d928acbd567315222b2363597f716f26c4cc49370e2e93ad4f2023-01-21
146t195317722553546142fb3d928acfd56b315222b2363587f716f26c48c49370e2e93dd4f2023-01-21
124t15411cc5271fa895d2bf649249cbc43b4265026237392beb5bf0dc6d05937002b979e8f2023-01-25
107t1fe11104270b6891c2bb259245cbc42b0165532232381be74bf0ec5c05937002ba79e8b2023-01-19
97t141217662513542182fb3d928acbd567315222b2363597f716f26c5cc49370e2f93ad4f2023-01-06
97t1d211020260b689282bb259205cbc42f1165526233341be75bf0ec5c4993b002aa78e8b2023-01-08
83t1ae11e10271f689282bf259245cbc43f4265126233341be71bf0dc5c0593b003b939e8b2023-01-25
69t107110c4371fa895c2bf249249cbc43b0265026237382beb0bf0dc6c05937002b979e8f2023-01-25
69t11ee07200ec75871c88dbaa749d8d07b4ca012216606b0b10cf10daf4c83f448f30ce4a2022-12-05
64t1d911d01371f6896d2bf259245cbc43b4255026237351be75bf0dc5d4593b002b979ecb2023-01-10
52t1b1213002a0faca282bf79920acbc43f106502a2373827f717f0ec6c44537002a979ddb2023-01-19
52t1b511dc4270ba891d2bb299249cbc42b5265536236382be75bf0ec5c49537002ba79e8b2023-01-19
51t11601c0a551b3851c1e7298344cfc46f92d16b62327817f70af0ac4949937001f23bf4b2022-11-17
50t19ee0df40ac699e2c98d7aa74dddd07a496016223556a4b10cf10dbe4883f458e30ce5e2022-06-17