Threat Feed | Online Malware Sandbox

URL

https://madsocksau.com

malicious

SHA256:

VMRay Threat Identifiers

Severity

Operation

5/5

Combination of other detections indicates a phishing website

4/5

Malicious host or URL detected via reputation

3/5

Webpage copies a device code to clipboard

2/5

Possible Pastejacking attempt

1/5

Content matched by YARA rules

1/5

Clickable indicates device code login

Phishing

http://madsocksau.com

2026-09-22T21:16:52.587

URL

http://madsocksau.com

malicious

SHA256:

VMRay Threat Identifiers

Severity

Operation

5/5

Combination of other detections indicates a phishing website

4/5

Malicious host or URL detected via reputation

3/5

Webpage copies a device code to clipboard

2/5

Possible Pastejacking attempt

1/5

Content matched by YARA rules

1/5

Clickable indicates device code login

Phishing

Setup.exe

2026-09-22T21:11:24.425

Windows Exe (x86-64)

Setup.exe

malicious

SHA256: b8349ec6d76e9d4bfd31b32d513047adedaff4703a83ef2fd0ca33cecff2a219

VMRay Threat Identifiers

Severity

Operation

4/5

Writes into the memory of another process

4/5

Modifies control flow of another process

2/5

Peripheral Device Discovery

2/5

Reads installed applications

1/5

Resolves API functions dynamically

1/5

Content matched by YARA rules

1/5

Creates a page with write and execute permissions

Injector

http://www.bogartscasino.com

2026-09-22T21:08:56.873

URL

http://www.bogartscasino.com

malicious

SHA256:

VMRay Threat Identifiers

Severity

Operation

5/5

Combination of other detections indicates a phishing website

4/5

Malicious host or URL detected via reputation

4/5

Dead Drop Resolver

3/5

Webpage copies a device code to clipboard

3/5

SmartContract configuration was extracted

2/5

Page is hosted on a recently registered domain

2/5

Possible Pastejacking attempt

2/5

Communicates with a Web3 service

1/5

Page contains clickables with luring keywords

1/5

Content matched by YARA rules

1/5

Communicates via JSON RPC protocol

1/5

URL contains a TLD highly associated with phishing

Phishing

Setup.exe

2026-09-22T21:07:30.251

Windows Exe (x86-64)

Setup.exe

malicious

SHA256: 60e0d96e704869022c2ca7b1c803c50b24089d0def526f0cbc7f24f7d149a5f2

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

4/5

Malicious file detected via reputation

3/5

Tries to open an unusually high number of parallel network connections

3/5

Uses HTTP to upload a large amount of data

2/5

Delays execution

2/5

Tries to detect analyzer sandbox

1/5

Resolves API functions dynamically

1/5

Queries system time

1/5

Creates mutex

1/5

Enumerates running processes

1/5

Content matched by YARA rules

1/5

Unusual large memory allocation

Spyware