Threat Feed | Online Malware Sandbox

URL

https://gateareis.vu/don/AZ-ULTIMATE-LINKEDIN/

malicious

SHA256:

VMRay Threat Identifiers

Severity

Operation

5/5

Combination of other detections indicates a phishing website

4/5

Phishing page detected via Machine Learning

4/5

Malicious host or URL detected via reputation

1/5

Loads image resources from another website

1/5

Page presents itself as a logon page

1/5

Page secured via a Domain Validated SSL certificate

1/5

Loads resources from a public service

1/5

Page uses exact favicon of a popular online service

Phishing

QyZO1766Rmv9D8CY.exe

2026-08-05T19:47:36.205

Windows Exe (x86-32)

QyZO1766Rmv9D8CY.exe

malicious

SHA256: 18614d8b60a2626a81e2baa18680bc04672c31719ec6bd27c5066e898ea292a4

VMRay Threat Identifiers

Severity

Operation

5/5

Combination of other detections shows multiple input capture behaviors

4/5

Malicious file detected via reputation

3/5

Reads installed applications

3/5

Captures clipboard data

3/5

Monitors user input

3/5

Connects to SMB share

2/5

Searches for sensitive application data

2/5

Schedules task

2/5

Deletes file after execution

2/5

Searches for sensitive mail data

2/5

Searches for sensitive browser data

2/5

Delays execution

1/5

Possibly does reconnaissance

1/5

Executes WMI query

1/5

Enumerates running processes

1/5

Enables process privileges

1/5

Resolves API functions dynamically

1/5

Drops PE file

1/5

Executes dropped PE file

1/5

Creates process with hidden window

1/5

Queries system time

1/5

Checks Internet connection

1/5

Modifies operating system directory

1/5

Installs system service

Spyware

Rc9DMDG2wR5OcrLR.exe

2026-08-05T19:47:25.186

Windows Exe (x86-32)

Rc9DMDG2wR5OcrLR.exe

malicious

SHA256: 5a966ec8da3d6c9eca64a5b82d913379df0128f46a623ee84aa5205c43398d95

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

4/5

Malicious file detected via reputation

2/5

Allows invalid SSL certificates

1/5

Drops PE file

1/5

The binary file was created with a packer

1/5

Creates a page with write and execute permissions

1/5

Executes dropped PE file

1/5

Creates process with hidden window

1/5

Resolves API functions dynamically

Ransomware

FlhNSZWuYi4T63Nz.exe

2026-08-05T19:45:57.838

Windows Exe (x86-64)

FlhNSZWuYi4T63Nz.exe

malicious

SHA256: 3ce8fe7828ee108af86875082588605bdab26d5c7493e2e97f5ae4dcaf3c6f31

VMRay Threat Identifiers

Severity

Operation

5/5

Known malicious mutex name is created

4/5

Malicious file detected via reputation

2/5

Tries to detect virtual machine

1/5

Creates process with hidden window

1/5

Creates a page with write and execute permissions

1/5

Resolves API functions dynamically

1/5

Modifies application directory

1/5

Possibly does reconnaissance

Ransomware

lFrvPSRxLxx16vGG.exe

2026-08-05T19:40:30.547

Windows Exe (x86-32)

lFrvPSRxLxx16vGG.exe

malicious

SHA256: 18c000235acc2d6024c4c2ebd0800f1ac0e048947b01aaebef7a04630474a3bd

VMRay Threat Identifiers

Severity

Operation

5/5

Combination of other detections shows multiple input capture behaviors

4/5

Malicious file detected via reputation

3/5

Captures clipboard data

3/5

Takes screenshot

3/5

Injects a file into another process

2/5

Delays execution

2/5

Deletes file after execution

2/5

Schedules task

2/5

Searches for sensitive mail data

1/5

Installs system service

1/5

Modifies operating system directory

1/5

Resolves API functions dynamically

1/5

Drops PE file

1/5

Executes dropped PE file

1/5

Enumerates running processes

1/5

Enables process privileges

1/5

Creates process with hidden window

1/5

Queries system time

Spyware