Statistics

YARAify produces detailed statistics on files scanned, including associated detections - find the available statistics below.

You can also access Spamhaus's Malware Digest report, based on YARAify data:

File Scans

The chart below shows the number of file scans conducted by YARAify over the past 30 days.

Data Scanned

This chart shows the amount of data scanned in Megabytes over the past 30 days.

API requests

The illustration below documents the number of API requests over the past 30 days.

Most matching YARA rules

YARA rules that matched most on files scanned on YARAify in the past 14 days.

Task countYARA RuleAuthorLast match
1'080'475Sus_Obf_Enc_Spoof_Hide_PEXiAnzheng2024-12-05
448'003SEH__vba2024-12-05
401'221RansomPyShield_AntiransomwareXiAnzheng2024-12-05
155'565DebuggerCheck__API2024-12-05
103'884pe_detect_tls_callbacks2024-12-05
66'249UPXV200V290MarkusOberhumerLaszloMolnarJohnReisermalware-lu2024-12-05
65'882RANSOMWAREToroGuitar2024-12-05
60'453NETmalware-lu2024-12-05
55'613UPXv20MarkusLaszloReisermalware-lu2024-12-05
53'109MD5_Constantsphoul (@phoul)2024-12-05
50'240command_and_controlCD_R0M_2024-12-05
38'556SHA1_Constantsphoul (@phoul)2024-12-05
38'556RIPEMD160_Constantsphoul (@phoul)2024-12-05
37'844vmdetectnex2024-12-05
35'016win_devopt_autoFelix Bilstein2024-12-03

ClamAV Most matching ClamAV signature

ClamAV signature that matched most on files scanned on YARAify in the past 14 days.

Task countClamAV SignatureLast match
417'433PUA.Win.Packer.Lccwin-22024-12-05
408'242Win.Malware.Midie-6847981-02024-12-05
394'364Win.Dropper.Ajku-10014126-02024-12-05
390'358Win.Dropper.Vbclone-10036195-02024-12-05
384'964Win.Trojan.Barys-10005825-02024-12-05
358'441Win.Malware.Generickdz-10004857-02024-12-05
351'479Win.Malware.Midie-6848630-02024-12-05
343'366Win.Malware.Midie-6847894-02024-12-05
275'905Win.Trojan.Obfus-382024-12-05
245'530Win.Packed.Generic-9967832-02024-12-05
204'442Win.Trojan.Qukart-6874817-02024-12-05
204'051Win.Trojan.Padodor-10016488-02024-12-05
163'429Win.Malware.Qukart-6838239-02024-12-05
102'138Win.Trojan.Berbew-9845290-12024-12-05
90'616Win.Trojan.Padodor-9877164-02024-12-05

Most seen files

Most seen files scanned by YARAify in the past 14 days.

Task countSHA256 hashLast seen
25171d3cc60ad33adf8955e27ef3e6440a5c85b70f98f8febfbdf01f0b1006657262024-11-20
236b7c93663df4e09c863e48368cc59b9d597086971ed62c4484b1dc9c0a941bf172024-11-06
1893bee0b067e35450783deb2fe8683042c55b060953e7ec78587fc8c94591ce0342024-09-27
1640a6fef7da6a116efdba4bcd792ca70cd61075ca5dc475c9fda988305bdc24e8d2024-11-25
1600402f4b721dc1d0174b20a81f5a84b284066a9d2672a0dd46f68e3c9acdbf7a92024-11-25
16001dff889a749e915d13e5a609821ec9deba20c88247f5e02598fd9b3ca086fc12024-11-25
1591a3713ff48e9c59946870e4e3a7b26e666c45f7a8398e43c8a160cbc8db4e9642024-11-25
156013d8d7289fe0be8c3f8ada1e671cb330da09acf953206c584601a7d6ad9967b2024-11-25
15602856920a3e341b55ca6b6e78023ae9085b0842247e8ad83cd9ccc18dff66fa02024-11-25
15318fe38f00a585b2e9e881a45bcf21abcb8be133e7928012c9554f92cf44d2f612024-11-25
151193bdb25be522c2ed95709ae1361584627ba2d31b8956af47cd180707fb3d0212024-11-25
150133a728ded47b94bc56de5ecb1dd1c1f65712e0c7d4a646e88a2b5ab656271402024-11-25
14617cb9cda56637dced1db7bb7ab117c7182e286bb5a683e82115a1fcc2f3cba5e2024-11-25
141c4aa1f5bdaeb179eec2ee31af7d8308414fd79925b381e0618498bcc39520b3c2024-11-09
139b3986e04464339cec16157cf8c8bffec3a8a8c5eae57997974d45f5369fa16552021-07-07

Top dhash icon

Top dhash icon observed on files scanned by YARAify in the past 14 days.

Task countdhash iconLast seen
231'12818b1b1b17068c8802024-12-04
100'05258b1b1b17068c8802024-12-04
36'074d8d0d4d8ececece42024-12-03
16'5531003873db9313e102024-12-04
10'9421003873d31213f102024-12-04
10'78319b1b1b17068c8802024-12-04
7'35418b1b1b17068c8812024-12-03
5'4619919aca682a881a92024-12-04
4'39404ccfee2ece4a4842024-12-04
4'19169ccd4d49696cc712024-12-04
2'24900ccc4d0c4fc7c002024-12-04
2'2111001873db9313e102024-12-04
2'099818da080a0a0a0a22024-12-04
2'03271b119dcce5763332024-12-04
1'878b298acbab2ca7a722024-12-04

Top imphash

Top imphash observed on files scanned by YARAify in the past 14 days.

Task countimphashLast seen
394'3675d6cad172c5535e4b6b6bbd2465716212024-12-04
115'867c9246f292a6fdc22d70e6e581898a0262024-12-04
105'52646f03ef2495b21d7ad3e8d36dc03315d2024-12-04
85'9996db997463de98ce64bf5b6b8b0f77a452024-12-04
68'7494dcbc0931c6f88874a69f966c86889d92024-12-04
35'816c06ddfbe3366daddf0cfd3e63c1b53902024-12-03
32'8793f8d79e42b0b7cecf379b1ddce4e422a2024-12-04
19'66787914047e74de74a89c530e3bb19409e2024-12-04
13'326f34d5f2d4577ed6d9ceec516c1f5a7442024-12-04
10'258dae02f32a21e03ce65412f6e56942daa2024-12-04
7'633e4742a62fda2e64b586a5b84efe3f0402024-12-02
7'433a12d186f65c99f872323a61923ce70d82024-12-04
6'748f481ea8169d367d8b0e94d0bf02da2202024-12-04
6'700be6fa16f501de575a1d8eaaac5246ba02024-12-04
6'588432c342c05744facf1143abcda5d68c42024-12-04

Top tlsh

Top tlsh observed on files scanned by YARAify in the past 14 days.

Task counttlshLast seen
137T1C8E052F688E090AC080023A82BDF2CA5437B03BD00202A0BF20BA04D022DF72E30A3F02021-07-07
134T1C303299736E310057B09BE36C154838FEF06CF59B976D74EE39826C73390A78662E0592023-04-08
133T1CCE2F87B94C24337C001EFB60B95C9AEBB736D306564C0E32BD42B1F892B9687D5D4692021-07-09
133T153819E61842314C4F557CFF0D61BD82AAFA5334684584E1123E0606A4BCF60427041E32022-02-07
132T138118CABCBE6ACF1C80C10B4070B8D013674883443E1C3170EA5007E7CA22FCD8B6E022021-07-09
130T18C03289737E350047B08BE36C154838FEF06CF59B976A74ED39926C72360A78622E45B2023-04-08
130T1EF16DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
129T10016DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
127T12F03288736E310056B09BE36C154839FEF06CFD9B976974ED39826C73390A78672E05A2023-04-08
125T1E0035A9736E310017B09BE32C154A38FEF06CF59B976D74ED39A26C73390A78662E0592023-04-08
124T1FBE47D21F1C18079E4F5157096FF7A5B246C69A64B2838E3E7987EC928741F27A3C2C72021-07-08
123T130940106BB01A33BC2B351F226DFD0DAA3386974172084A379DC06757355CD8B63A7DA2024-10-16
123T1BCE47D21F1C18079E4F5157096FF7A5B246C69A64B2838E3E7987EC928741F27A3C2C72021-07-08
122T1B5033E9736E31000FB09BE35C654834FEF06CF59B97A9B4ED39826C72371A78629E0592022-02-07
122T1D7819E61842314C4F557CEF4D51BE869BFA5734550584E1423E0705A4BCBA1427551A32022-02-08

Top telfhash

Top telfhash observed on files scanned by YARAify in the past 14 days.

Task counttelfhashLast seen
71t1d9e0c240adb89a1e9ce35bb8ddcd07b1a1116253a4270b10cf58e6e0c83f988a60de6d2024-12-03
67t119e07d00fc75875c5cd79a749ddd07b49900220250574b00cf10d6f0c83f444e308d5e2024-12-03
58t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aacd2024-12-04
57t15c2131705336a115aea1cc64dcee87f2111996232744af73ee36c0cc68060cae52bc0f2024-12-03
48t157110e13a0b9ca282bf348249dbc07f005502b23a782be71bf0ac5c49437002a875d9b2024-11-29
41t10ce07200fcb88b2c9cdaaab4adcd07b4aa00220260178b10cf10daf0c83f448e30ce5e2024-12-03
38t19ce07200ec798b288cdbaab4ad9d07b8ca012212606b4b10cf10daf4c83f448f30ce5a2024-12-03
37t1c121e4b1471a56246665cfec8ddd73aa022c83155386df33df21c4ec640909de535c8f2024-12-03
34t11121dc365b205a2a9a61cd54d9ee53b2222cc7165788fe33cf35848c201509efa3bc5f2024-12-03
34t130212071132546295a61cd988aed63b6022883172389ef33df2184ac200a0def63ac4f2024-12-03
32t177e02600ec758a2ca8c7aa749ddd07a49600621250464b008f10daf0c83f444e30895a2024-12-03
32t16a31de544ecd16dc86f08a85954d633b3aa134b19f122d1a4f977f8f8753cd170294362024-12-03
32t1ad11e113a0b9ca286bf758349dbc47f105512b23b746be71bf0ac5c49537002b975d9b2024-11-29
30t16821ccb1572a96245969cfdc8add73a9022c93022246ef33ef2184bca41949df629c4f2024-12-03
30t1e54105facb940ddc27d4cb54858d7219a5e435fc1b103176ce2a97178216cd2761f4362024-12-03

File Scans

The chart below shows the number of file scans conducted by YARAify over the past 12 months.

Data Scanned

This chart shows the amount of data scanned in Megabytes over the past past 12 months.

API requests

The illustration below documents the number of API requests over the past past 12 months.

Most matching YARA rules

YARA rules that matched most on files scanned on YARAify in the past 12 months.

Task countYARA RuleAuthorLast match
25'488'408maldoc_getEIP_method_1Didier Stevens (https://DidierStevens.com)2024-11-13
25'342'711meth_get_eipWilli Ballenthin2024-11-13
23'097'267QbotStuffanonymous2024-08-15
12'015'323win_berbew_strings_dec_2023Matthew @ Embee_Research2024-11-13
5'190'695DebuggerCheck__API2024-12-05
4'517'958classifiedclassified2024-09-24
4'127'358SEH__vba2024-12-05
2'115'945NETmalware-lu2024-12-05
2'104'990SHA512_Constantsphoul (@phoul)2024-12-05
2'100'422UPXV200V290MarkusOberhumerLaszloMolnarJohnReisermalware-lu2024-12-05
2'054'236malware_shellcode_hashJPCERT/CC Incident Response Group2024-12-05
1'941'439maldoc_find_kernel32_base_method_1Didier Stevens (https://DidierStevens.com)2024-11-13
1'815'092UPXv20MarkusLaszloReisermalware-lu2024-12-05
1'631'263DebuggerException__SetConsoleCtrl2024-12-05
1'617'660DebuggerCheck__QueryInfo2024-12-05

ClamAV Most matching ClamAV signature

ClamAV signature that matched most on files scanned on YARAify in the past 12 Mmonths.

Task countClamAV SignatureLast match
51'895'633PUA.Win.Packer.Lccwin-22024-12-04
34'632'179Win.Trojan.Obfus-382024-12-04
32'968'675Win.Trojan.Qukart-6874817-02024-12-04
29'241'449Win.Trojan.Padodor-10016488-02024-12-04
25'592'762Win.Malware.Qukart-6838239-02024-12-04
7'394'211Win.Trojan.Padodor-9877164-02024-12-04
6'897'480Win.Trojan.Berbew-9845290-12024-12-04
6'305'120SecuriteInfo.com.BackDoor.HangUp.43874.UNOFFICIAL2024-12-04
4'121'762Win.Packed.Razy-10010080-02024-12-04
3'842'856Win.Trojan.Razy-10016933-02024-12-04
3'623'113Win.Packed.Lazy-10005437-02024-12-04
3'608'985Win.Trojan.Berbew-10013977-02024-12-04
3'281'905Win.Trojan.Crypted-292024-12-04
3'260'355Win.Trojan.Crypted-302024-12-04
3'156'101Win.Malware.Midie-6847981-02024-12-04

Most seen files

Most seen files scanned by YARAify in the past 12 months.

Task countSHA256 hashLast seen
3'374a4ec9fd2488f0b1734317beb74e1524838d0f7c907eb4e452d7cf40c03c7e5dd2021-07-08
3'358b3986e04464339cec16157cf8c8bffec3a8a8c5eae57997974d45f5369fa16552021-07-07
3'348e0af7f483f4965dca90eb5921ae004a7e41593b39284a63af97a9105b96718e72022-01-06
3'34239e48a3fc7e67968ff5d6e3cf8e12a7256af93ccabbce4da20d28c79237d95e82022-01-06
3'33823c2d2b0c6cec3e69cb07f942c9e56f2087aeb24015be25823897faafc4708ae2022-02-07
3'3261115b6c913a207b9d81f8482613b2a9c2929ca81399861d2d2c47422e244060d2022-02-07
3'30969c88b4d5ea84620d1b762d5119fe9293c34e68268e7006cb503b865e963b2512021-07-09
3'296ebd6320e24d47c0d638749a149f14f4c94b1c98afa228dba1f48eea19a2c72572021-07-09
3'28787479e089e6852958dab4026e07bc01ed1f31af423b1d26db462ef7493a537f12022-02-08
3'2815ea4d94c695189639e9ab7afe8d76d231030921fbfdd95e1941c7c0a05fb8f032022-02-07
3'2358718400c6ca71b5afb0534931628b2aace3e5cc515edaa33d1da678f947b5cd42022-02-08
3'233c8c158269c68d6b09d0c8b118b6588302816f2936c193579b35512d6a6af506e2022-02-08
3'23153c22863323c0f5ff94f4ae86df27a51db4eae7232cc38333346ee8be9df5aa62022-02-07
3'230cdfb8e3d5bfb32850200759b0d3ccaa83ed5cb661cb2cccedf048d23959663602022-02-08
3'22996994840078a8dbaaa3175c80b72c01c3a7f258be338c94c58672cacf5e47a872022-02-08

Top dhash icon

Top dhash icon observed on files scanned by YARAify in the past 12 months.

Task countdhash iconLast seen
1'746'78118b1b1b17068c8802024-12-04
638'428d8d0d4d8ececece42024-12-03
515'51558b1b1b17068c8802024-12-04
500'18869ccd4d49696cc712024-12-04
493'0611003873db9313e102024-12-04
219'9411003873d31213f102024-12-04
214'644818da080a0a0a0a22024-12-04
121'31000ccc4d0c4fc7c002024-12-04
118'5349919aca682a881a92024-12-04
118'44771e8d4968ecc68f92024-12-03
117'5355ab3a5b332c482a02024-12-04
115'375b298acbab2ca7a722024-12-04
104'776526e32661e3a2a102024-12-04
81'77104ccfee2ece4a4842024-12-04
50'159f8f0f4c8c8c8d8f02024-12-04

Top imphash

Top imphash observed on files scanned by YARAify in the past 12 months.

Task countimphashLast seen
15'638'3186db997463de98ce64bf5b6b8b0f77a452024-12-04
10'251'8694dcbc0931c6f88874a69f966c86889d92024-12-04
8'477'16446f03ef2495b21d7ad3e8d36dc03315d2024-12-04
6'330'185c9246f292a6fdc22d70e6e581898a0262024-12-04
2'440'4015d6cad172c5535e4b6b6bbd2465716212024-12-05
2'232'728e4742a62fda2e64b586a5b84efe3f0402024-12-02
938'36487914047e74de74a89c530e3bb19409e2024-12-04
757'18391f4b88d25daa33c7443253d9beb1bb32024-12-05
713'8323f8d79e42b0b7cecf379b1ddce4e422a2024-12-04
524'3302c2ad1dd2c57d1bd5795167a7236b0452024-12-04
422'705a3df475500e5e30f4680b397c2ee13f12024-12-05
378'405c06ddfbe3366daddf0cfd3e63c1b53902024-12-03
375'724f34d5f2d4577ed6d9ceec516c1f5a7442024-12-05
269'3591a611a7df1f3828b0157c4725145a7212024-12-03
248'524dae02f32a21e03ce65412f6e56942daa2024-12-05

Top tlsh

Top tlsh observed on files scanned by YARAify in the past 14 months.

Task counttlshLast seen
3'368T1C8E052F688E090AC080023A82BDF2CA5437B03BD00202A0BF20BA04D022DF72E30A3F02021-07-07
3'368T16211801BC7D1ADF1C44C01700F5786041735D42453D583574E94047EFC561BC6CD6C062021-07-08
3'356T10016DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
3'350T1EF16DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
3'338T1B5033E9736E31000FB09BE35C654834FEF06CF59B97A9B4ED39826C72371A78629E0592022-02-07
3'331T153819E61842314C4F557CFF0D61BD82AAFA5334684584E1123E0606A4BCF60427041E32022-02-07
3'299T138118CABCBE6ACF1C80C10B4070B8D013674883443E1C3170EA5007E7CA22FCD8B6E022021-07-09
3'294T1D7819E61842314C4F557CEF4D51BE869BFA5734550584E1423E0705A4BCBA1427551A32022-02-08
3'289T1CCE2F87B94C24337C001EFB60B95C9AEBB736D306564C0E32BD42B1F892B9687D5D4692021-07-09
3'281T160030B9736E31000FB09BE32E554C24FEF06CF59B976974ED39826C72350A78662E45B2022-02-07
3'238T1A58162A0432FB74ADC5680B151DEA0E16667707204E5CA0551C916ADDB829F0EF74C332022-02-08
3'237T10E8132A0832FBA4ADC96847151DEE1E16667307604E5C50161DA26DEDB83AE4EF78C332022-02-08
3'236T1BD812B4525A230CAC056C270ED52C158ABD9BC37AF44D3BBF1B90FDD83112451CC1B0B2022-02-07
3'233T1DD816250432BB64AEC9A84B0409EA1E13657217214F2C91161CA66DC8B82AF4AF68C332022-02-08
3'233T1688141C1405F2A7CF2ED8ABCA20506C43D46B4B324754D651184782DAA23E4C7722A332022-02-08

Top telfhash

Top telfhash observed on files scanned by YARAify in the past 12 months.

Task counttelfhashLast seen
235t18c3112a19679512a5da1ec68edda57b2501a56172350bf33df21c0cc380a44ff527c0f2024-12-03
222t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aacd2024-12-04
215t157110e13a0b9ca282bf348249dbc07f005502b23a782be71bf0ac5c49437002a875d9b2024-11-29
193t1bc3111b19679512a59a1ec68edde5bb2511a96172340fe33ee21c0cc380a44fe52bc0f2024-12-02
185t1ad11e113a0b9ca286bf758349dbc47f105512b23b746be71bf0ac5c49537002b975d9b2024-11-29
155t13611d04270b6891d2bb659245cbc42b5165536236381be75bf0ec5c45537002ba79e8b2024-12-03
155t1dd21d0d8885ab05899828810e83f0981595bd257423cedc3bf34d8d20c7e5cdf887d7b2024-06-27
149t18a5106fa2dbe0cfcb3e56c08c74e2ad32a55da7b1951357184a79ca533f3a4080a5c362024-11-29
144t17141a2180d7817e0a7356c9d099dfb36d6a330de7e262d338f61e86aab69a435d11c0c2024-11-29
133t195317722553546142fb3d928acfd56b315222b2363587f716f26c48c49370e2e93dd4f2024-11-28
130t17011f01361b6ca1d2bb659348dfc47f016512b236282bf71bf0dc5c88537042b93ad9b2024-11-05
124t171217622513542182fb3d928acbd567315222b2363597f716f26c4cc49370e2e93ad4f2024-11-28
119t102016852cf670a4c97c3c31091ec9223b4b27566152039c2476d2ecc15503f3ba2c43f2024-12-02
118t19f900224424f44549a804241e0dd66018ed0e3131125289007d04440140332060051412024-12-03
110t114215352a1f5cb282bb38934adbc03f51251a6136282bf756f0ec5c454331436934ddb2024-11-09