YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash aa2f5d3e14f507e20d30ff81d1d92d9ecea0107de31fd2b3b82a960727c37360.

Scan Results

SHA256 hash: aa2f5d3e14f507e20d30ff81d1d92d9ecea0107de31fd2b3b82a960727c37360
File size:61'440 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: f256178b8ac89667f184d077f2d8f1f6
SHA1 hash: 1201ec4be1729861aaa28e639e77398cc752baab
SHA3-384 hash: e454b904f2cddd0c7cf5e3237309a0ef9770c4e775e0ad3d5a5a4f38a82ab99bc16b59bc5e8b20a305c33996614412ca
First seen:2024-10-18 05:12:33 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 768:N84rp+UOJk7A87SqAKT1jYB+8LCOZ8veIuB+1CHrF0eoIF4wnbcuyD7UoH:Npe8eqAK5jYg8LCOZ8GIuBHnouy8o
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

You can browse the 10 most recent tasks associated with this file blow.

Task Information

Task ID:952582c3-8d0f-11ef-b6ec-42010aa4000b
File name:400000.coiome.exe
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:SecuriteInfo.com.Graftor.Elzob-2.UNOFFICIAL
Create hunting rule
Signature:Win.Trojan.Wuca-9976398-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:meth_stackstrings
Create hunting rule
Author:Willi Ballenthin
TLP:TLP:WHITE
Repository:YARAify
Rule name:UPX293300LZMAMarkusOberhumerLaszloMolnarJohnReiser
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:UPXv20MarkusLaszloReiser
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.