Threat Feed | Online Malware Sandbox

Windows Exe (x86-32)

OQeuBuQ09kzJSItd.exe

malicious

SHA256: dce2ae4021844ab0597fc370a2f0afcbdf25c4ed082728667d5a7a5279dcc973

VMRay Threat Identifiers

Severity

Operation

4/5

Malicious file detected via reputation

4/5

Writes into the memory of another process

4/5

Modifies control flow of another process

2/5

Delays execution

2/5

Schedules task

1/5

Installs system startup script or application

1/5

Resolves API functions dynamically

1/5

Creates an unusually large number of files

1/5

Drops PE file

1/5

Installs system service

1/5

Queries system time

1/5

Executes dropped PE file

1/5

Tries to detect debugger

1/5

Enables process privileges

1/5

Enumerates running processes

1/5

Creates a page with write and execute permissions

Injector

fKIpZjZacvxVHGIy.exe

2026-09-05T09:33:17.480

Windows Exe (x86-64)

fKIpZjZacvxVHGIy.exe

malicious

SHA256: 92c0a9ef7074f48bfc4e866cfecd768aea286b4f890dcdb17ed9d7b3bb0bde11

VMRay Threat Identifiers

Severity

Operation

5/5

Known malicious mutex name is created

4/5

Malicious file detected via reputation

2/5

Tries to detect virtual machine

1/5

Possibly does reconnaissance

1/5

Creates a page with write and execute permissions

1/5

Resolves API functions dynamically

1/5

Modifies application directory

1/5

Queries system time

Ransomware

pF8t570TJE9kE6nT.exe

2026-09-05T09:32:09.089

Windows Exe (x86-64)

pF8t570TJE9kE6nT.exe

malicious

SHA256: b1ceef2494efae40afa50fc94f757a4c80e23131ca30ad46a0070d4a70c4a360

VMRay Threat Identifiers

Severity

Operation

5/5

Known malicious mutex name is created

4/5

Malicious file detected via reputation

2/5

Tries to detect virtual machine

1/5

Resolves API functions dynamically

1/5

Overwrites code

1/5

A monitored process crashed

1/5

Creates a page with write and execute permissions

1/5

Creates mutex

1/5

Queries system time

1/5

Modifies application directory

Ransomware

Gd2US9LJM7BxIQoH.exe

2026-09-05T09:32:01.052

Windows Exe (x86-32)

Gd2US9LJM7BxIQoH.exe

malicious

SHA256: 080b627bf573a9236d8012f16e4b7634964c54db62ee1adae4c66e84f2c9d526

VMRay Threat Identifiers

Severity

Operation

5/5

Known malicious mutex name is created

5/5

Malicious content matched by YARA rules

4/5

Malicious file detected via reputation

4/5

Malicious content matched by YARA rules

2/5

Delays execution

2/5

Deletes file after execution

2/5

Suspicious content matched by YARA rules

1/5

Drops PE file

1/5

Installs system startup script or application

1/5

Creates process with hidden window

1/5

Modifies operating system directory

1/5

Executes dropped PE file

Spyware

Trojan

https://weba-zim-log.weebly.com

2026-09-05T09:31:02.897

URL

https://weba-zim-log.weebly.com

malicious

SHA256:

VMRay Threat Identifiers

Severity

Operation

5/5

Combination of other detections indicates a phishing website

5/5

Malicious content matched by YARA rules

4/5

Malicious host or URL detected via reputation

4/5

Phishing page detected via Machine Learning

2/5

Page title matches the name of a popular online service

2/5

Page is served from a service commonly used for temporary hosting

1/5

Logon form detected via Computer Vision

1/5

Page secured via a Domain Validated SSL certificate

1/5

Resource is loaded from a service commonly used for temporary hosting

1/5

Content matched by YARA rules

1/5

Communicates via JSON RPC protocol

Phishing