Threat Feed | Online Malware Sandbox

Windows Exe (x86-32)

CHblyZKegnhLFMXC.exe

malicious

SHA256: b8f0595a925dc21fcdf9d13b52a920450017ce099b7401f6eac1336d58ac1fc4

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

4/5

Malicious file detected via reputation

3/5

Suspicious content matched by YARA rules

2/5

Signed executable failed signature validation

Backdoor

Trojan

HlDDZcPhTaObHnCS.exe

2026-08-07T03:32:12.371

Windows Exe (x86-64)

HlDDZcPhTaObHnCS.exe

malicious

SHA256: 5265d3026e4cacbc13aa254dc1461cc21dfeb1d5e5a4306a87634ae2256d3470

VMRay Threat Identifiers

Severity

Operation

5/5

Known malicious mutex name is created

4/5

Malicious file detected via reputation

2/5

Tries to detect virtual machine

1/5

Resolves API functions dynamically

1/5

A monitored process crashed

1/5

Creates a page with write and execute permissions

1/5

Creates mutex

1/5

Queries system time

1/5

Modifies application directory

Ransomware

yirkicvQfo6m14II.exe

2026-08-07T03:31:17.700

Windows Exe (x86-64)

yirkicvQfo6m14II.exe

malicious

SHA256: e1fcf66674eed3d592646b22af3e089dd5eef2fc8a98577c14a0679e6f3c3adf

VMRay Threat Identifiers

Severity

Operation

5/5

Known malicious mutex name is created

4/5

Malicious file detected via reputation

2/5

Tries to detect virtual machine

1/5

A monitored process crashed

1/5

Resolves API functions dynamically

1/5

Possibly does reconnaissance

1/5

Creates a page with write and execute permissions

Ransomware

QYy1JZsdgYcj5eZv.exe

2026-08-07T03:30:53.606

Windows Exe (x86-32)

QYy1JZsdgYcj5eZv.exe

malicious

SHA256: d15a5de3bf95af553060abefcf9a40d1f925d3d57826d48d46781f680923023f

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

4/5

Malicious file detected via reputation

4/5

Malicious host or URL detected via reputation

2/5

Allows invalid SSL certificates

1/5

Creates a page with write and execute permissions

1/5

Executes dropped PE file

1/5

Creates process with hidden window

1/5

Resolves API functions dynamically

1/5

Drops PE file

Ransomware

8cAXV94k3oBrAHlY.exe

2026-08-07T03:30:35.271

Windows Exe (x86-32)

8cAXV94k3oBrAHlY.exe

malicious

SHA256: 5ad36c03a91beca0b98ba9927c0e4267b767f286240584b130f95e2338ad864d

VMRay Threat Identifiers

Severity

Operation

4/5

Modifies Windows Defender configuration

4/5

Monitors clipboard content

4/5

Malicious file detected via reputation

2/5

Sets up server that accepts incoming connections

2/5

Reads network adapter information

2/5

Delays execution

1/5

Content matched by YARA rules

1/5

Resolves API functions dynamically

1/5

A monitored process crashed

1/5

Drops PE file

1/5

Timestamp manipulation

1/5

Unusual large memory allocation

1/5

Installs system startup script or application

1/5

Creates mutex

1/5

Creates process with hidden window

1/5

Accesses Microsoft Security Software registry keys

1/5

Performs DNS request

1/5

Connects to remote host

Keylogger