Statistics

YARAIfy produces various statistics on files scanned by YARAify, including their detections. The available statistics can be found below.

File Scans

The chart below shows the number of file scans conducted by YARAify over the past 30 days.

Data Scanned

This chart shows the amount of data scanned in Megabytes over the past 30 days.

API requests

The illustration below documents the number of API requests over the past 30 days.

Most matching YARA rules

YARA rules that matched most on files scanned on YARAify in the past 14 days.

Task countYARA RuleAuthorLast match
245'918meth_get_eipWilli Ballenthin2023-06-01
186'226QbotStuffanonymous2023-06-01
61'307pdb_YARAify@wowabiy3142023-05-30
55'777SUSP_Imphash_Mar23_2Arnim Rupp (https://github.com/ruppde)2023-06-01
22'053malware_shellcode_hashJPCERT/CC Incident Response Group2023-06-01
19'009shellcodenex2023-06-01
18'207BitcoinAddressDidier Stevens (@DidierStevens)2023-06-01
18'165command_and_controlCD_R0M_2023-06-01
18'071pe_imphash2023-06-01
18'071Skystars_Malware_ImphashSkystars LightDefender2023-06-01
15'215PE_Potentially_Signed_Digital_Certificatealbertzsigovits2023-06-01
14'428TeslaCryptPackedMalware2023-06-01
13'614MAL_Malware_Imphash_Mar23_1Arnim Rupp2023-06-01
13'273extracted_at_0x44bcb2023-06-01
13'185PE_Digital_Certificatealbertzsigovits2023-06-01

ClamAV Most matching ClamAV signature

ClamAV signature that matched most on files scanned on YARAify in the past 14 days.

Task countClamAV SignatureLast match
138'560Win.Malware.Dqqw-9951425-02023-06-01
137'936Win.Malware.Zusy-6804618-02023-06-01
137'936Win.Trojan.QQPass-5710308-02023-06-01
47'939Win.Malware.Midie-6847893-02023-06-01
47'787Win.Malware.Zusy-6878655-02023-06-01
44'425Win.Malware.Midie-6847981-02023-06-01
43'724Win.Malware.Midie-6848630-02023-06-01
43'243Win.Malware.Midie-6847894-02023-06-01
43'129Win.Malware.Midie-6847892-02023-06-01
43'129Win.Malware.Midie-6848784-02023-06-01
36'995Win.Malware.Snojan-6775202-02023-05-31
35'827PUA.Win.Packer.Lccwin-22023-06-01
29'042Win.Malware.Gepys-9770177-02023-06-01
23'566Win.Trojan.Obfus-382023-06-01
19'887PUA.Win.Packer.AcprotectUltraprotect-12023-06-01

Most seen files

Most seen files scanned by YARAify in the past 14 days.

Task countSHA256 hashLast seen
14339e48a3fc7e67968ff5d6e3cf8e12a7256af93ccabbce4da20d28c79237d95e82022-01-06
143e0af7f483f4965dca90eb5921ae004a7e41593b39284a63af97a9105b96718e72022-01-06
142b3986e04464339cec16157cf8c8bffec3a8a8c5eae57997974d45f5369fa16552021-07-07
1425d2c578c6f0fe65a39e920bf03b5023ca0ace5efa80c316f7f454067cfea87b32021-07-07
141e19b0ba085a6c6f754df5f6f3a2ad8d490eafb62ad14606a943e7de2d0e3e03f2021-07-07
1415ea4d94c695189639e9ab7afe8d76d231030921fbfdd95e1941c7c0a05fb8f032022-02-07
14034407aabb42b92d5deb5f04e15fa7821807e83d6c3ec7902ec43897ee0889abf2021-07-08
14010e249bf07de6cbcc0d353a65cf21146be3336c701ad7c4ad149ffadca9200c92021-07-08
14012da1916958f80548fd48b8e9f5e1ae4109fb0f9868bb936421a7826a909f71b2021-07-09
14023c2d2b0c6cec3e69cb07f942c9e56f2087aeb24015be25823897faafc4708ae2022-02-07
14032996a04eeead4de0813ca803033429fd38e0aa4ab8d603508e1d2c6bd38aba72022-02-08
1401ba4d1009777e59f808d4d7a88f1c7481ae854ec6db66fe73286a3f29e1a31722021-07-08
14053c22863323c0f5ff94f4ae86df27a51db4eae7232cc38333346ee8be9df5aa62022-02-07
1401115b6c913a207b9d81f8482613b2a9c2929ca81399861d2d2c47422e244060d2022-02-07
14037789fda70de69d9f357b207d8007ba63972496feb0a48e911aa7e6ab5d13a962022-02-09

Top dhash icon

Top dhash icon observed on files scanned by YARAify in the past 14 days.

Task countdhash iconLast seen
1'862f8f0f4c8c8c8d8f02023-06-01
9329919aca682a881a92022-07-23
56569ccd4d49696cc712023-04-15
328c6c2ccc4f4e0e0f82023-05-10
303aebc385c4ce0e8f82023-04-26
293b298acbab2ca7a722023-06-01
146338be5f1f1a9adb72022-07-23
136399998ecd4d46c0e2023-05-29
62754d657573596d512022-07-23
43e0a2a2a6a6c460b22023-06-01
33414555c0d4d445032022-10-31
3000606969697144102023-05-30
2771ccb28a8ed4e0712022-06-05
227c70747474d672742022-06-07
211865676565a521582022-11-03

Top imphash

Top imphash observed on files scanned by YARAify in the past 14 days.

Task countimphashLast seen
138'0892c2ad1dd2c57d1bd5795167a7236b0452023-06-01
36'93684706849fa809feaa385711a628be0292023-05-31
23'983a3df475500e5e30f4680b397c2ee13f12023-06-01
18'083f34d5f2d4577ed6d9ceec516c1f5a7442023-06-01
16'435be6fa16f501de575a1d8eaaac5246ba02023-06-01
14'540dae02f32a21e03ce65412f6e56942daa2023-06-01
13'87146f03ef2495b21d7ad3e8d36dc03315d2023-05-31
11'4241639b1e17656fed4f63bac94cbb79cec2023-06-01
10'522bb73b10792501019aba44f9a83c3b5da2023-06-01
8'249646167cce332c1c252cdcb1839e0cf482023-06-01
7'584c9246f292a6fdc22d70e6e581898a0262023-06-01
6'45991f4b88d25daa33c7443253d9beb1bb32023-06-01
6'311cdf5bbb8693f29ef22aef04d2a161dd72023-05-31
6'2184dcbc0931c6f88874a69f966c86889d92023-05-31
6'0430141f24aaf1b810b9fcc5f6886f26f142023-05-31

Top tlsh

Top tlsh observed on files scanned by YARAify in the past 14 days.

Task counttlshLast seen
407T162158D333D95C179C62227365A3CF25719BCF5600C758C83B2A89EEE9FB86839514E272023-05-28
216T163158D333D95C179C62227365A3CF25719BCF5600C758C83B2A89EEE9FB86839514E272023-05-27
213T1DD158D333D95C179C62227365A3CF25719BCF5600C758C83B2A89EEE9FB86839514E272023-05-27
211T16D32F1F94DD4E7AC4ED46381A7DF2C341EA306743331368B99269AB8621277FA11B0D72022-11-21
188T1CA32F0F94DD4E7AC4ED46381A7DF2C341EA306743331368B99269AB8621277FA11B0D72023-05-15
185T1A232F1F94DD4E7AC4ED46381A7DF2C341EA306743331368B99269AB8621277FA11B0D72022-08-04
175T18CF3E16FB4C99E53D522A179C40E4E29C06D8DD72F21C593B62A2F0DF372376E3128662023-05-08
174T159F3D0BBB0D59E67D12661B8C04E5B26A49E8ECB2F21C48375287F0DF372335DB219462023-04-26
171T19EF3E06F75D64E57C27660BAC10A0B25826D8DCB5B20C0C3B51D7F0DE7B23B1EB229662023-04-26
166T188F3E06FB9D89E57C162A179C01A4B29906E8DCB4F21D483762D2E0EF373372C7279162023-04-30
159T1E0D4642D0327604ED089F036233FDA9A7A06ACBF5F78B775F581254EBDE15CB806A5242022-08-22
154T1F0F3E06FB5D56E17C222B0B9C15A0626C0AE8CCB1F21C4C3765A7F0DE3A7376D7228652023-05-11
148T130F3E06FB5D48EA3C566A078C11E0B2590AE8DCB9B21C1C3B61DAF0DE373372D7224562023-05-08
147T196F3E02B72D59E57C662A079C41E0A25D0AECCCB5B12C1C375293F1EF7723B2D7128652023-05-24
145T1ED32E0F94DD4E7AC4ED46381A7DF2C341EA306743331368B99269AB8621277FA11B0D72023-03-05

Top telfhash

Top telfhash observed on files scanned by YARAify in the past 14 days.

Task counttelfhashLast seen
30t18421fe46a1f6856d2ff368345dbc46b5188227133361bf70af0985c01c7b002a936ecb2023-05-31
25t1ad210246a1f68a685ff368205dbc46b5199217273351af70af1984c01c7b002a939ecb2023-05-31
20t1c421fe47a1f6856d2ff368345dbc46b5188227133361bf70af0985c01c7b002a93aecb2023-05-31
18t1d9e0c240adb89a1e9ce35bb8ddcd07b1a1116253a4270b10cf58e6e0c83f988a60de6d2023-05-31
11t19421df46a1f6856d2ff369345dbc4ab5194227133761af70af0985c01cbb002a93aecb2023-05-31
11t171217622513542182fb3d928acbd567315222b2363597f716f26c4cc49370e2e93ad4f2023-05-30
11t11e21dc46a1fa856d6ef368245dbc46b5189227233361af70af1985d01c7b002a936acb2023-05-31
10t1cc21fe46a5fa86685ff76920adbc47b508521b137652bf706f09c5c01c7b002a93addb2023-05-31
10t1c931ffb1471a851456a9dfecd8d977ab012cc2111347ef33ef21c4bc940a09de921c4f2023-05-29
10t1a821cb229b35452a6a62cd60dcfda7b2152887132344ba37df39c8cc681a05ae53bc4f2023-05-31
9t1a5018c037076c94d2bf218288cbc47b4159036277751beb5bf0dc5849537002ea7ae8b2023-05-29
9t1b121fe46a1fa856d2ff368305dbc46b5188227133361bf70af0a85c01c7b002a936ecb2023-05-29
9t15411cc5271fa895d2bf649249cbc43b4265026237392beb5bf0dc6d05937002b979e8f2023-05-29
9t195317722553546142fb3d928acfd56b315222b2363587f716f26c48c49370e2e93dd4f2023-05-30
8t187e02600fe788e1a59e35a74ddde07b5a0125153a0364721cf68e6e0c83ba99650ce7d2023-05-24

File Scans

The chart below shows the number of file scans conducted by YARAify over the past 12 months.

Data Scanned

This chart shows the amount of data scanned in Megabytes over the past past 12 months.

API requests

The illustration below documents the number of API requests over the past past 12 months.

Most matching YARA rules

YARA rules that matched most on files scanned on YARAify in the past 12 months.

Task countYARA RuleAuthorLast match
4'595'957meth_get_eipWilli Ballenthin2023-06-01
2'109'105pdb_YARAify@wowabiy3142023-05-30
1'870'249QbotStuffanonymous2023-06-01
775'608BitcoinAddressDidier Stevens (@DidierStevens)2023-06-01
693'689Skystars_Malware_ImphashSkystars LightDefender2023-06-01
693'689pe_imphash2023-06-01
617'417command_and_controlCD_R0M_2023-06-01
540'125meth_stackstringsWilli Ballenthin2023-06-01
412'050win_heodo2023-04-23
406'081extracted_at_0x44bcb2023-06-01
391'833crime_win64_emotet_unpackedRony (r0ny_123)2023-04-23
384'759INDICATOR_EXE_Packed_MPressditekSHen2023-06-01
383'535malware_shellcode_hashJPCERT/CC Incident Response Group2023-06-01
380'864win_sality_autoFelix Bilstein2023-05-31
359'497exploit_any_poppopretJeff White [karttoon@gmail.com] @noottrak2022-06-22

ClamAV Most matching ClamAV signature

ClamAV signature that matched most on files scanned on YARAify in the past 12 Mmonths.

Task countClamAV SignatureLast match
1'077'385Win.Malware.Dqqw-9951425-02023-06-01
1'076'090Win.Trojan.QQPass-5710308-02023-06-01
1'076'072Win.Malware.Zusy-6804618-02023-06-01
842'190PUA.Win.Packer.Lccwin-22023-06-01
665'450PUA.Win.Packer.Upx-42022-10-27
610'819Win.Trojan.Qukart-6874817-02023-06-01
535'753Win.Trojan.Obfus-382023-06-01
507'755Win.Malware.Zusy-6878655-02023-06-01
501'361PUA.Win.Packer.Asprotect-32023-06-01
491'640PUA.Win.Packer.Pequake-42023-06-01
479'258Win.Malware.Midie-6847893-02023-06-01
477'709Win.Malware.Midie-6847981-02023-06-01
451'247PUA.Win.Packer.AcprotectUltraprotect-12023-06-01
437'423Win.Malware.Qukart-6838239-02023-06-01
425'889Win.Malware.Midie-6848630-02023-06-01

Most seen files

Most seen files scanned by YARAify in the past 12 months.

Task countSHA256 hashLast seen
150'031bfc6bff6a3be4c198b51f7ac0a28a8b61baaadbffcdcca8f25ef35b616c53cc52022-07-14
28'68123c2d2b0c6cec3e69cb07f942c9e56f2087aeb24015be25823897faafc4708ae2022-02-07
24'679cf581ab47fabfc401ebca29130781037fb56b3bc54515f845f6f26bb4cbf96702022-06-08
21'2891665e0d57f7f62035a0f720ca385a82a27502283bf131d1628c877159e79a2102021-07-08
16'833e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b8552021-07-12
16'712e19b0ba085a6c6f754df5f6f3a2ad8d490eafb62ad14606a943e7de2d0e3e03f2021-07-07
16'4552d93837ee387916c4a6060912fcb2b9fdaa836f419d2a038500299b376b5fbcd2021-07-08
15'503e205555fbd6d109a9a32431382bd8745d71179fbe14fb76f9ab828d9ebe7d6132022-06-08
15'380acd9d0a0bb6508a504fa8bdceef1135cbe4aa7ba1210d51985dec16af99348702022-07-06
14'166e0af7f483f4965dca90eb5921ae004a7e41593b39284a63af97a9105b96718e72022-01-06
14'13939e48a3fc7e67968ff5d6e3cf8e12a7256af93ccabbce4da20d28c79237d95e82022-01-06
11'7805ea4d94c695189639e9ab7afe8d76d231030921fbfdd95e1941c7c0a05fb8f032022-02-07
11'743fd12cc99732abf63b8322265d5def2eaf5ad28edda33849f020e46a376acc1662022-06-06
11'08782b709d71791dae36a12b6ef02ba8d876db1c3c8b398892a4a07c7a29df97fb62022-07-12
11'0535d2c578c6f0fe65a39e920bf03b5023ca0ace5efa80c316f7f454067cfea87b32021-07-07

Top dhash icon

Top dhash icon observed on files scanned by YARAify in the past 12 months.

Task countdhash iconLast seen
23'4759919aca682a881a92022-07-23
20'760c271cc9cae8de9722023-01-01
15'212f8f0f4c8c8c8d8f02023-06-01
13'38637373339294935872022-07-23
13'004f8fcec9e8e88c0e82022-10-13
9'55430d4f0e8ccdcf0712022-07-23
6'663399998ecd4d46c0e2023-05-29
6'146b298acbab2ca7a722023-06-01
5'750c472e0e0b8cc70b02022-10-22
5'63769ccd4d49696cc712023-04-15
4'945e0e4a2aaa4b8a8882023-02-06
4'163e94a6e71e932f0332022-07-23
3'451ccee64f4e1e8da9a2022-07-05
3'337338be5f1f1a9adb72022-07-23
3'260ccf0f0c8d496e0f02022-10-06

Top imphash

Top imphash observed on files scanned by YARAify in the past 12 months.

Task countimphashLast seen
1'070'7662c2ad1dd2c57d1bd5795167a7236b0452023-06-01
693'269f34d5f2d4577ed6d9ceec516c1f5a7442023-06-01
491'401dae02f32a21e03ce65412f6e56942daa2023-06-01
238'813be6fa16f501de575a1d8eaaac5246ba02023-06-01
198'5376db997463de98ce64bf5b6b8b0f77a452023-06-01
186'9388abecba2211e61763c4c9ffcaa13369e2023-05-31
171'71684706849fa809feaa385711a628be0292023-05-31
168'53268d9776cadfeba9a6849d2f603b34a8f2023-02-06
157'30746f03ef2495b21d7ad3e8d36dc03315d2023-05-31
157'095e4742a62fda2e64b586a5b84efe3f0402023-05-31
134'098a3df475500e5e30f4680b397c2ee13f12023-06-01
131'933a12d186f65c99f872323a61923ce70d82023-05-31
99'528d8b32e731e5438c6329455786e51ab4b2023-05-31
93'511cdf5bbb8693f29ef22aef04d2a161dd72023-05-31
86'937bf5a4aa99e5b160f8521cadd6bfe73b82023-06-01

Top tlsh

Top tlsh observed on files scanned by YARAify in the past 14 months.

Task counttlshLast seen
28'695T1B5033E9736E31000FB09BE35C654834FEF06CF59B97A9B4ED39826C72371A78629E0592022-02-07
24'701T129F36C24E84345E7F87B1932D0077A2FD4647D295220EE7BD954CE9AFF22B14A20F25E2022-06-12
16'734T18CC048F380E010420460231313EF1E452B5F235C77462623F42C7D808320A3A37A39722021-07-07
15'503T161F37C24E55354EBF9B70832D4073B0FD8642D155210AE7FE6588ED7AF22B22A21F25F2022-06-08
15'380T1C8D0C9F088E8101C6412373657CF6CCD034317321A02A917F9262429B160AB743C33EA2022-07-06
14'174T10016DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
14'147T1EF16DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
11'784T160030B9736E31000FB09BE32E554C24FEF06CF59B976974ED39826C72350A78662E45B2022-02-07
11'747T19DF36C24E84305E7F87B1932D0477A2FE4646D295210EE7FD954CE9AFF32B14A20B25E2022-06-09
11'097T192D002F380E0149A4460331317DF1D451B5F136DB78A2613F83D7E84432093A37539712021-07-07
11'087T19C84BF24A49356EBF96B0432D0477A8FD9382D14A310DE3BE694CFA6AF31704970F65E2022-07-12
10'874T1BD812B4525A230CAC056C270ED52C158ABD9BC37AF44D3BBF1B90FDD83112451CC1B0B2022-02-07
9'962T159812B0F36800DF0C38228BF8C15BC19DBA13030301048C3C080BCC11A12042D478B3F2022-06-10
9'849T16832E0F94DE4E7AC4DD46381A7DF3C341EA306742731368B99269AB8621277FA0174D32021-07-08
9'083T1B873119B3ADC5DD1D0840B3818F5C52B4EA1F9B8029E8F3661C0A56F5DDD68A093C7B12022-04-26

Top telfhash

Top telfhash observed on files scanned by YARAify in the past 12 months.

Task counttelfhashLast seen
220t1d9e0c240adb89a1e9ce35bb8ddcd07b1a1116253a4270b10cf58e6e0c83f988a60de6d2023-05-31
212t171217622513542182fb3d928acbd567315222b2363597f716f26c4cc49370e2e93ad4f2023-05-30
208t195317722553546142fb3d928acfd56b315222b2363587f716f26c48c49370e2e93dd4f2023-05-30
189t13611d04270b6891d2bb659245cbc42b5165536236381be75bf0ec5c45537002ba79e8b2023-05-16
187t15821e2bf1e6709fcb3c4a898c32b62931679d273056132b401b3ad9923f2ec05169d3a2023-05-31
176t15c2131705336a115aea1cc64dcee87f2111996232744af73ee36c0cc68060cae52bc0f2023-05-31
161t19311f718893853f497b21d9e6becfb76e45171db4a265e338d40e96e9b2dd029d00c1c2023-05-31
149t15411cc5271fa895d2bf649249cbc43b4265026237392beb5bf0dc6d05937002b979e8f2023-05-29
139t141217662513542182fb3d928acbd567315222b2363597f716f26c5cc49370e2f93ad4f2023-05-30
134t18421fe46a1f6856d2ff368345dbc46b5188227133361bf70af0985c01c7b002a936ecb2023-05-31
126t1fe11104270b6891c2bb259245cbc42b0165532232381be74bf0ec5c05937002ba79e8b2023-05-16
116t1992121a2ba6509a0f1fbf561b304d0450d200a1416fa36f2c275b9fadba5b820f78c372023-05-29
111t1ad210246a1f68a685ff368205dbc46b5199217273351af70af1984c01c7b002a939ecb2023-05-31
111t1d211020260b689282bb259205cbc42f1165526233341be75bf0ec5c4993b002aa78e8b2023-05-16
98t1ae11e10271f689282bf259245cbc43f4265126233341be71bf0dc5c0593b003b939e8b2023-05-29