How to block below hash value. Please help us
Hash Values cannot be blocked from FW level, you need to upload that file to wildfire in order to get the Antivirus signature (Threat ID).
You can check the Threat vault for HASH values,
If you cannot find the HASH values, check with VirusTotal or other public sites and find the File Type of the HASH because Antivirus signature will be created only based on Wildfire supported file types. Please contact your local palo alto SE to create a feature request on your behalf for Wildfire support of that particular executable file, feature requests could be implemented in future.
Find below the link that has information regarding Wildfire Supported File Types:
As mentioned you can't create a blocking action against a file hash.
You could however create a custom signature if you have a copy of the sample.
For more info please see:
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!