Threat Feed | Online Malware Sandbox

URL

malicious

SHA256:

VMRay Threat Identifiers

Severity

Operation

5/5

Combination of other detections indicates a phishing website

4/5

Malicious host or URL detected via reputation

2/5

Unsecured data

2/5

Branded Logon form detected via Computer Vision

2/5

Page uses exact same title as that of a popular online service

1/5

Branding image detected via Computer Vision

1/5

Page presents itself as a logon page

Phishing

m575sZLNmDA1OMjH.exe

2026-09-11T08:29:34.614

Windows Exe (x86-32)

m575sZLNmDA1OMjH.exe

malicious

SHA256: 435788e31f596f3f43435a4c692e2148aad293120228dd5af79e09b4d61a8a88

VMRay Threat Identifiers

Severity

Operation

4/5

Writes into the memory of another process

4/5

Malicious file detected via reputation

4/5

Modifies control flow of another process

2/5

Schedules task

2/5

Delays execution

1/5

Installs system startup script or application

1/5

Enumerates running processes

1/5

Enables process privileges

1/5

Queries system time

1/5

Content matched by YARA rules

1/5

Resolves API functions dynamically

1/5

Creates an unusually large number of files

1/5

Creates a page with write and execute permissions

1/5

Creates process with hidden window

1/5

Tries to detect debugger

1/5

Installs system service

1/5

Unusual large memory allocation

Injector

aWifAyxcjXcFq6WX.exe

2026-09-11T08:25:15.213

Windows Exe (x86-32)

aWifAyxcjXcFq6WX.exe

malicious

SHA256: a0c1fde08af48c284486a5ac312e60c6340d642558deaef63da8be1005767a79

VMRay Threat Identifiers

Severity

Operation

5/5

Known malicious mutex name is created

4/5

Malicious file detected via reputation

2/5

Searches for sensitive mail data

2/5

Searches for sensitive application data

2/5

Searches for sensitive browser data

2/5

Delays execution

2/5

Suspicious content matched by YARA rules

2/5

Searches for sensitive remote access configuration data

2/5

Searches for sensitive password manager data

1/5

Resolves API functions dynamically

1/5

Modifies operating system directory

1/5

Creates mutex

1/5

Installs system startup script or application

1/5

Creates process with hidden window

1/5

Drops PE file

1/5

Executes dropped PE file

Wiper

06HWnBWfIMCtErQ9.exe

2026-09-11T08:23:45.302

Windows Exe (x86-32)

06HWnBWfIMCtErQ9.exe

malicious

SHA256: 33edc626b6b60c610316ed0e7c1093f61083c9c6c7cfee29dcb58715ae1af97e

VMRay Threat Identifiers

Severity

Operation

5/5

Deletes user files

5/5

Appends new extensions to many filenames

5/5

Malicious content matched by YARA rules

4/5

Uses a double file extension

4/5

Malicious file detected via reputation

1/5

Creates a page with write and execute permissions

1/5

Drops PE file

1/5

Modifies application directory

1/5

Changes folder appearance

1/5

Resolves API functions dynamically

1/5

Creates an unusually large number of files

Ransomware

Wiper

x86_64

2026-09-11T08:23:38.255

Linux ELF Executable (x86-64)

x86_64

malicious

SHA256: 731bcb0dbf0a64ddab900f2582da160903e7ab04b532d4bab71c7fe5551b4f2d

VMRay Threat Identifiers

Severity

Operation

5/5

Mirai configuration was extracted

5/5

Malicious content matched by YARA rules

4/5

Malicious file detected via reputation

2/5

Sets up server that accepts incoming connections

2/5

Delays execution

1/5

Connects to remote host

1/5

Tries to connect using an uncommon port

1/5

Queries system time

Bot