Authenticate for API access | If you are experiencing issues with receiving data from abuse.ch platforms via API, please ensure your requests are authenticated.
➡️ Read here for more info

MalwareBazaar Database

This page shows some basic information the YARA rule SUSP_Imphash_Mar23_3 including corresponding malware samples.

Database Entry


YARA Rule:SUSP_Imphash_Mar23_3
Author:Arnim Rupp (https://github.com/ruppde)
Description:Detects imphash often found in malware samples (Maximum 0,25% hits with search for 'imphash:x p:0' on Virustotal) = 99,75% hits
Firstseen:2023-04-02 23:55:18 UTC
Lastseen:2025-09-11 15:35:34 UTC
Sightings:3'632

Malware Samples


The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter