Threat Feed | Online Malware Sandbox

Windows Exe (x86-32)

lvfgceq.exe

malicious

SHA256: db5f9f8d40febd4a24fe32746f97d8670009bc78c93a1307a243345d4c1aa8af

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

2/5

Suspicious content matched by YARA rules

1/5

Executes dropped PE file

1/5

Creates process with hidden window

1/5

Modifies operating system directory

1/5

Connects to remote host

1/5

Content matched by YARA rules

1/5

Reads system data

1/5

Installs system service

1/5

Drops PE file

Hacktool

test.exe

2025-06-17T16:13:06.823

Windows Exe (x86-64)

test.exe

malicious

SHA256: cd0e3ebc13e9a741877908b086a8c331bfc0756f6acdbcbf0e34302ed9661251

VMRay Threat Identifiers

Severity

Operation

5/5

QuasarRAT configuration was extracted

5/5

Malicious content matched by YARA rules

4/5

Obscures a file's origin

1/5

Modifies operating system directory

1/5

Query OS Information

1/5

Enables process privileges

1/5

Creates mutex

1/5

Executes dropped PE file

1/5

Creates process with hidden window

1/5

Drops PE file

Backdoor

092ec40570a5c2a21b3e4725bc1c0a4e371da7487b12553f82c79cd069b38f8c.exe

2025-06-17T16:12:56.482

Windows Exe (x86-32)

092ec40570a5c2a21b3e4725bc1c0a4e371da7487b12553f82c79cd069b38f8c.exe

malicious

SHA256: 092ec40570a5c2a21b3e4725bc1c0a4e371da7487b12553f82c79cd069b38f8c

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

5/5

Lumma configuration was extracted

4/5

Makes indirect system call to possibly evade hooking based monitoring

3/5

Modifies native system functions

3/5

Tries to evade debugger

2/5

Delays execution

2/5

Tries to detect debugger

2/5

Tries to detect a forensic tool

2/5

Tries to detect virtual machine

1/5

Enumerates running processes

1/5

Obfuscates control flow

Spyware

java.exe

2025-06-17T16:12:02.508

Windows Exe (x86-32)

java.exe

malicious

SHA256: dc572d10917d9b592b057f6a9639cfe588c0d0cd778a4fccb101ae11b8ea7d4f

VMRay Threat Identifiers

Severity

Operation

4/5

Writes into the memory of another process

4/5

Modifies control flow of another process

4/5

Entry point injection

2/5

Creates a new process from a system binary

2/5

Delays execution

2/5

Hides files

1/5

A monitored process crashed

1/5

Drops PE file

1/5

Installs system startup script or application

1/5

Creates a page with write and execute permissions

1/5

Enumerates running processes

1/5

Possibly does reconnaissance

1/5

Creates mutex

1/5

Performs DNS request

1/5

Connects to remote host

1/5

Resolves API functions dynamically

Injector

OlympicSt.exe

2025-06-17T16:11:42.657

Windows Exe (x86-32)

OlympicSt.exe

malicious

SHA256: 867ce1a46b95bd453cc8dedef1e091340393abc23d3b443f0164132c498fd7f0

VMRay Threat Identifiers

Severity

Operation

4/5

Writes into the memory of another process

4/5

Process Hollowing

4/5

Entry point injection

4/5

Modifies control flow of another process

2/5

Hides files

2/5

Delays execution

2/5

Modifies control flow of a process started from a created or modified executable

1/5

Enumerates running processes

1/5

Possibly does reconnaissance

1/5

Creates process with hidden window

1/5

Installs system startup script or application

1/5

Creates mutex

1/5

Performs DNS request

1/5

Connects to remote host

1/5

Resolves API functions dynamically

1/5

Drops PE file

1/5

Executes dropped PE file

1/5

Creates a page with write and execute permissions

Injector