NEW | Hunt across all abuse.ch platforms with one simple query - discover if an IPv4 address, domain, URL or file hash has been identified on any platform from a centralized search tool. Test it out here hunting.abuse.ch - and happy hunting 🔍

YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 444c23b4b5bcba906acfa0a7127fe3a1bbb1b2f7d95658dcd876635908cf7703.

Scan Results

SHA256 hash: 444c23b4b5bcba906acfa0a7127fe3a1bbb1b2f7d95658dcd876635908cf7703
File size:446'464 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: bb8b11a4a1446ae82e44765576d0922f
SHA1 hash: c68ba6fadcbbb504416063489400f8a0f2586223
SHA3-384 hash: 461c087424c861f87190759dee329ea98958d00b63aca96dc3305ea8dd334c4d05ac092032c306b8b0f960fb78ac58ff
First seen:2023-04-12 19:53:52 UTC
Last seen:Never
Sightings:1
imphash : 141f2ce2f817f3ef05b46973f0173651
Create hunting rule
ssdeep : 3072:JtNaxGSGtGSGOGOGlGln+VD/m8ClX0kUb+16H6b5p8I0yH/JN8HOWShM+L7aL7:JcbELf/MR/cWdi5pV/JNWOVhM
TLSH : T19B942B467227E1E4E4288837551331F61BCE5CB26E0FAE267158BF3738721D46E19A3B
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 0 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:c05f26c6-d96b-11ed-866d-42010aa4000b
File name:bb8b11a4a1446ae82e44765576d0922f
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Trojan.VB-73727
Create hunting rule
Signature:Win.Worm.Aozo-6887862-0
Create hunting rule
Signature:Win.Worm.Autorun-21534
Create hunting rule
Signature:Win.Worm.Vobfus-6877831-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.