Threat Feed
xuex3
2026-11-09T16:34:44.714
malicious
Linux ELF Executable (x86-64)
Close
xuex3
malicious
SHA256:
40fb8681e80a34daa953d29bf0bc5686dc6ea219d5b35e003aa7eee0a7b95ad4
VMRay Threat Identifiers
Close
Severity
Operation
5/5
Malicious content matched by YARA rules
4/5
Malicious file detected via reputation
3/5
All network connection attempts failed
1/5
A monitored process crashed
1/5
Tries to connect using an uncommon port
1/5
Connects to remote host
1/5
Queries system time
Trojan
Bot
d4T7vCv5rIKymAGZ
2026-11-09T16:34:28.616
malicious
Linux ELF Executable (x86-64)
Close
d4T7vCv5rIKymAGZ
malicious
SHA256:
f83bd29c7f33c5189ec14e5cc9e0a368c0746764b30ea22b5d99c3c3ee127456
VMRay Threat Identifiers
Close
Severity
Operation
5/5
Malicious content matched by YARA rules
4/5
Malicious file detected via reputation
3/5
All network connection attempts failed
2/5
Tries to detect virtual machine
1/5
Tries to detect virtual machine
1/5
Performs DNS request
1/5
Tries to connect using an uncommon port
1/5
Queries system time
PUA
Miner
5qurk8j
2026-11-09T16:34:21.737
malicious
Linux ELF Executable (x86-64)
Close
5qurk8j
malicious
SHA256:
72fc600a08c99ea1a32e63aeb7cf515d70a7e6b2247a0847c6fe437f98f8fa67
VMRay Threat Identifiers
Close
Severity
Operation
5/5
Malicious content matched by YARA rules
5/5
Gafgyt configuration was extracted
4/5
Malicious file detected via reputation
3/5
All network connection attempts failed
1/5
Tries to connect using an uncommon port
1/5
Connects to remote host
1/5
Queries system time
Trojan
Bot
123.exe
2026-11-09T16:24:46.311
malicious
Windows Exe (x86-64)
Close
123.exe
malicious
SHA256:
8571cd5e0c11adb18bb7753d303812d7e17b66ceb3508b3cbccb5e145ff9c027
VMRay Threat Identifiers
Close
Severity
Operation
5/5
XMRig configuration was extracted
5/5
Malicious content matched by YARA rules
4/5
Loads a known vulnerable file
4/5
Malicious content matched by YARA rules
4/5
Malicious file detected via reputation
4/5
Malicious host or URL detected via reputation
3/5
Suspicious file detected via reputation
3/5
Executes code with kernel privileges
2/5
Schedules task
2/5
Reads network adapter information
2/5
Sends control codes to a driver
2/5
Sets up server that accepts incoming connections
1/5
Queries system time
1/5
Unusual large memory allocation
1/5
Query OS Information
1/5
Enables process privileges
1/5
Modifies operating system directory
1/5
Performs DNS request
1/5
Connects to remote host
1/5
Content matched by YARA rules
1/5
Resolves API functions dynamically
1/5
Tries to detect virtual machine
1/5
Drops PE file
1/5
Executes dropped PE file
1/5
Reads system data
PUA
Miner
ok.exe
2026-11-09T16:23:18.410
malicious
Windows Exe (x86-64)
Close
ok.exe
malicious
SHA256:
b0fb564268645ac1a1a38a2b193d9f622e532c3dfd50dcc5e3b94af77119d125
VMRay Threat Identifiers
Close
Severity
Operation
5/5
Malicious content matched by YARA rules
5/5
XMRig configuration was extracted
4/5
Loads a known vulnerable file
4/5
Malicious host or URL detected via reputation
4/5
Malicious content matched by YARA rules
3/5
Suspicious file detected via reputation
3/5
Executes code with kernel privileges
2/5
Sends control codes to a driver
2/5
Reads network adapter information
2/5
Creates an unusually large number of processes
2/5
Sets up server that accepts incoming connections
1/5
Content matched by YARA rules
1/5
Connects to remote host
1/5
Performs DNS request
1/5
Reads system data
1/5
Resolves API functions dynamically
1/5
Tries to detect virtual machine
1/5
Enables process privileges
1/5
Unusual large memory allocation
1/5
Drops PE file
1/5
Executes dropped PE file
1/5
Query OS Information
1/5
Queries system time
PUA
Miner