YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 92682131959e2ed0f126e093f0b301b118222d40e779af1b4099aa869dd611ae.

SHA256 hash:	92682131959e2ed0f126e093f0b301b118222d40e779af1b4099aa869dd611ae
File size:	70'656 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	2eefa471afb7327f92b7a01b212f2313
SHA1 hash:	f94b89a6b67ed05f42d6d9e8fec4520023586c36
SHA3-384 hash:	95ba31686cebe95e4fa6cc32f552d8796757aea1bd1306d3c9de96d09b3ce19fb88d6e0271ca766321332d2bc4f62cb3
First seen:	2025-08-24 22:19:25 UTC
Last seen:	Never
Sightings:	1
imphash :	9b251c7eaa7ba20c201259c38a6c8211 Create hunting rule
ssdeep :	768:45sRApUM5+35PwilTHYfGT3aQwhNrOwvaCH2Lkwf6NAWLPLsr0Ly3iPv:XaC35PrZXwvaCHgkwfeICXP
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	DebuggerCheck__API Create hunting rule
Reference:	https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:	TLP:WHITE

Rule name:	Disable_Defender Create hunting rule
Author:	iam-py-test
Description:	Detect files disabling or modifying Windows Defender, Windows Firewall, or Microsoft Smartscreen
TLP:	TLP:WHITE
Repository:	MalwareBazaar

Rule name:	golang_bin_JCorn_CSC846 Create hunting rule
Author:	Justin Cornwell
Description:	CSC-846 Golang detection ruleset
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	INDICATOR_SUSPICIOUS_GENRansomware Create hunting rule
Author:	ditekSHen
Description:	Detects command variations typically used by ransomware
TLP:	TLP:WHITE
Repository:	diˈtekSHən

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2025-08-24 22:19:26 UTC Static: 4 Unpacker: 0 ClamAV: 0