Threat Feed
0mVBxNxEUIAfgX7F.exe
2026-08-19T10:40:54.584
malicious
Windows Exe (x86-32)
Close
0mVBxNxEUIAfgX7F.exe
malicious
SHA256:
0c5541eda4ac102743e268df71073d6fa362ac4bc93edd9b574bcd5e4e5b7b52
VMRay Threat Identifiers
Close
Severity
Operation
5/5
Malicious content matched by YARA rules
4/5
Malicious file detected via reputation
3/5
Suspicious content matched by YARA rules
2/5
Sets up server that accepts incoming connections
2/5
Accesses physical drive
1/5
Connects to remote host
1/5
Tries to detect application sandbox
1/5
Content matched by YARA rules
1/5
Unusual large memory allocation
1/5
Resolves API functions dynamically
1/5
Accesses volumes directly
1/5
Performs DNS request
Hacktool
y3HtGeWnhmRGYIhB.exe
2026-08-19T10:40:54.022
malicious
Windows Exe (x86-64)
Close
y3HtGeWnhmRGYIhB.exe
malicious
SHA256:
0cda5c579a3726002e6e4e9d5ee2ed043d2fe9b891a9e433aa97e620f43985c9
VMRay Threat Identifiers
Close
Severity
Operation
5/5
Known malicious mutex name is created
4/5
Malicious file detected via reputation
2/5
Tries to detect virtual machine
2/5
Sends control codes to a driver
1/5
Creates a page with write and execute permissions
1/5
Resolves API functions dynamically
1/5
Modifies application directory
1/5
Queries system time
1/5
Accesses volumes directly
1/5
Creates mutex
Ransomware
AKcI4HB3IZqaCuCV.exe
2026-08-19T10:39:23.445
malicious
Windows Exe (x86-64)
Close
AKcI4HB3IZqaCuCV.exe
malicious
SHA256:
002a70b8728b20d3a7febb2d9d23e13825c4bad17b375043ae0692167b8499c8
VMRay Threat Identifiers
Close
Severity
Operation
5/5
Known malicious mutex name is created
4/5
Malicious file detected via reputation
2/5
Tries to detect virtual machine
1/5
A monitored process crashed
1/5
Resolves API functions dynamically
1/5
Possibly does reconnaissance
1/5
Modifies application directory
1/5
Creates a page with write and execute permissions
Ransomware
extracted_file.bat
2026-08-19T10:33:04.164
malicious
Windows Batch File
Close
extracted_file.bat
malicious
SHA256:
52efe88b2d87512349f82225d75c2c9d8452cc3108dcb21555d47cbebcc2e6ac
VMRay Threat Identifiers
Close
Severity
Operation
5/5
Tries to read cached credentials of various applications
5/5
Sets up server that accepts incoming connections
5/5
Combination of other detections shows multiple input capture behaviors
4/5
Tries to detect the presence of antivirus software
4/5
Makes indirect system call to possibly evade hooking based monitoring
4/5
Attempts to connect through HTTP
3/5
Takes screenshot
3/5
Reads sensitive browser data
3/5
Captures clipboard data
3/5
Delays execution
2/5
Searches for sensitive mail data
2/5
Queries OS info via WMI
2/5
Collects hardware properties
2/5
Possibly does reconnaissance
2/5
Drops PE file
2/5
Suspicious content matched by YARA rules
2/5
Performs DNS request
2/5
Searches for sensitive browser data
2/5
Executes dropped PE file
2/5
Searches for cryptocurrency wallet locations
2/5
Searches for sensitive application data
1/5
Unusual large memory allocation
1/5
Creates mutex
1/5
Query OS Information
1/5
Enumerates running processes
1/5
Connects to remote host
1/5
Timestamp manipulation
1/5
Accesses volumes directly
1/5
Accesses Microsoft Security Software registry keys
Spyware
Backdoor
AODLKGXTP.exe
2026-08-19T10:32:37.726
malicious
Windows Exe (x86-32)
Close
AODLKGXTP.exe
malicious
SHA256:
83c14b80d271b6e63666fc6eb404ed0b5a61a542a7bb15c08f2ac2bfdd624d84
VMRay Threat Identifiers
Close
Severity
Operation
5/5
Malicious content matched by YARA rules
4/5
DLL Hollowing
2/5
Deletes file after execution
2/5
Signed executable failed signature validation
2/5
Suspicious content matched by YARA rules
1/5
Resolves API functions dynamically
1/5
Overwrites code
1/5
Drops PE file
1/5
Loads a dropped DLL
1/5
Executes dropped PE file
1/5
Queries system time
1/5
Timestamp manipulation
1/5
Creates process with hidden window
1/5
Query OS Information
1/5
Enumerates running processes
1/5
Content matched by YARA rules
Downloader
Injector