Authenticate for API access | If you are experiencing issues with receiving data from abuse.ch platforms via API, please ensure your requests are authenticated. ➡️ Read here for more info

YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash b698776bb67cee67b6ead46e51d86478473597b0844645c9711566dc411404f7.

Scan Results


SHA256 hash: b698776bb67cee67b6ead46e51d86478473597b0844645c9711566dc411404f7
File size:593'920 bytes
File download: Original
MIME type:application/octet-stream
MD5 hash: debf48db65963e5967982b5c34891ed9
SHA1 hash: 073e922346dd663af24a5d4f94b40443350bca72
SHA3-384 hash: d197f6cef026ccf1c2e7d184ff1466ea120260a014a0d6d327b85ccad620dbe147e336b035bc4a05a4951dd3537fe301
First seen:2025-10-14 22:25:25 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 6144:CR9NFzDqa86hV6uRRqX1evPlwALFzDqa86hV6uRRqX1evPlwA:uaFusuyX1evPl5sFusuyX1evPl5
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks


There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information


Task ID:ae5f1ba6-a94c-11f0-adeb-42010aa4000b
File name:5400000.shc
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results


The file matched the following open source and commercial ClamAV rules.

YARA Results


Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:NETexecutableMicrosoft
Author:malware-lu
TLP:TLP:WHITE
Repository:

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files


The following files could be unpacked from this sample.