Threat Feed
9yNbIbKMS0rOsC57.exe
2026-10-07T21:10:56.063
malicious
Windows Exe (x86-32)
Close
9yNbIbKMS0rOsC57.exe
malicious
SHA256:
b19cbeca63d90d2abc6b8beaa521f1b37ddd62779a13fbd39bd4cf016ecd81fd
VMRay Threat Identifiers
Close
Severity
Operation
5/5
Malicious content matched by YARA rules
4/5
Malicious host or URL detected via reputation
4/5
Malicious file detected via reputation
3/5
Obscures a file's origin
3/5
Uses HTTP to upload a large amount of data
2/5
Disables a system tool
1/5
Installs system service
1/5
Modifies operating system directory
1/5
Queries system time
1/5
Creates process with hidden window
1/5
Creates a page with write and execute permissions
1/5
Enumerates running processes
1/5
Query OS Information
1/5
Uses encryption API
1/5
Reads system data
Downloader
MdBzHOPUKgHy5fN6.exe
2026-10-07T21:05:35.925
malicious
Windows Exe (x86-32)
Close
MdBzHOPUKgHy5fN6.exe
malicious
SHA256:
f9d76a9b466c9cc54cc6c20018afee906adec5bf21c22527983da499d14dd225
VMRay Threat Identifiers
Close
Severity
Operation
5/5
Malicious content matched by YARA rules
4/5
Malicious file detected via reputation
4/5
Malicious host or URL detected via reputation
3/5
Uses HTTP to upload a large amount of data
3/5
Obscures a file's origin
2/5
Disables a system tool
1/5
Enumerates running processes
1/5
Query OS Information
1/5
Installs system service
1/5
Modifies operating system directory
1/5
Reads system data
1/5
Queries system time
1/5
Creates process with hidden window
1/5
Creates a page with write and execute permissions
Downloader
xVtSqUstON0WKePY.exe
2026-10-07T21:04:43.565
malicious
Windows Exe (x86-32)
Close
xVtSqUstON0WKePY.exe
malicious
SHA256:
446849e95c1b0bec9aed778661606cd44fa5d6aaf664a941938389aabcb570da
VMRay Threat Identifiers
Close
Severity
Operation
5/5
Malicious content matched by YARA rules
4/5
Malicious file detected via reputation
4/5
Malicious host or URL detected via reputation
4/5
Rename system utilities
2/5
Hides files
2/5
Accesses physical drive
2/5
Sends control codes to a driver
2/5
Tries to detect virtual machine
2/5
Delays execution
2/5
Deletes file after execution
1/5
Executes dropped PE file
1/5
Enumerates running processes
1/5
Queries system time
1/5
Connects to remote host
1/5
Tries to connect using an uncommon port
1/5
Reads system data
1/5
Query CPU Properties
1/5
Creates process with hidden window
1/5
Modifies application directory
1/5
Resolves API functions dynamically
1/5
Drops PE file
1/5
Loads a dropped DLL
1/5
Creates mutex
1/5
Enables process privileges
7MgYZB1KJdYmb7WF.exe
2026-10-07T21:02:42.656
malicious
Windows Exe (x86-32)
Close
7MgYZB1KJdYmb7WF.exe
malicious
SHA256:
ae3ad903e14a8eaa3a4e43b99c03d3fb045635c8d860aee8b3928d3f85412b7f
VMRay Threat Identifiers
Close
Severity
Operation
5/5
Malicious content matched by YARA rules
4/5
Malicious file detected via reputation
3/5
All network connection attempts failed
2/5
Queries a host's domain name
2/5
Sets up server that accepts incoming connections
2/5
Reads network adapter information
2/5
Delays execution
1/5
Content matched by YARA rules
1/5
Resolves API functions dynamically
1/5
Tries to detect virtual machine
1/5
Queries system time
1/5
Creates a page with write and execute permissions
1/5
Unusual large memory allocation
1/5
Enumerates running processes
1/5
Connects to remote host
1/5
Tries to detect application sandbox
1/5
Reads system data
1/5
Tries to connect using an uncommon port
Backdoor
mstXVpT3owid7aGQ.exe
2026-10-07T21:02:27.887
malicious
Windows Exe (x86-32)
Close
mstXVpT3owid7aGQ.exe
malicious
SHA256:
f6b4de38827ad87bc71f06126a55497035bbc3901793b1ca6aed25e1268198e0
VMRay Threat Identifiers
Close
Severity
Operation
5/5
Malicious content matched by YARA rules
4/5
Malicious file detected via reputation
4/5
Malicious host or URL detected via reputation
3/5
Obscures a file's origin
3/5
All network connection attempts failed
2/5
Disables a system tool
1/5
Creates a page with write and execute permissions
1/5
Enumerates running processes
1/5
Query OS Information
1/5
Modifies operating system directory
1/5
Queries system time
1/5
Installs system service
1/5
Creates process with hidden window
1/5
Reads system data
Downloader