Threat Feed | Online Malware Sandbox

Windows Exe (x86-32)

Q93aueEKtJGaQjG8.exe

malicious

SHA256: 37e66928c05dff2befb1b500d6a3eff4264a08c71b33496572923aa18d3b0c52

VMRay Threat Identifiers

Severity

Operation

4/5

Writes into the memory of another process

4/5

Modifies control flow of another process

3/5

All network connection attempts failed

2/5

Delays execution

1/5

Creates a page with write and execute permissions

1/5

Query OS Information

1/5

Changes folder appearance

1/5

Possibly does reconnaissance

1/5

Drops PE file

1/5

Loads a dropped DLL

1/5

Executes dropped PE file

1/5

Enumerates running processes

1/5

Timestamp manipulation

1/5

Modifies application directory

1/5

Creates process with hidden window

1/5

Modifies operating system directory

Injector

XdwG1VnJPKJPyjQo.exe

2026-02-21T20:29:08.700

Windows Exe (x86-32)

XdwG1VnJPKJPyjQo.exe

malicious

SHA256: 1487ebeb601a4bf0453eb32636a71259ac3ddb197372f0d168637a72703ea60a

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

5/5

Known malicious mutex name is created

2/5

Deletes file after execution

2/5

Delays execution

2/5

Suspicious content matched by YARA rules

1/5

Executes dropped PE file

1/5

Resolves API functions dynamically

1/5

Installs system startup script or application

1/5

Creates process with hidden window

1/5

Modifies operating system directory

1/5

Drops PE file

Spyware

Trojan

PnLxzWYzcvTUfwmA.exe

2026-02-21T20:27:29.573

Windows Exe (x86-32)

PnLxzWYzcvTUfwmA.exe

malicious

SHA256: b7df3f0336fd08dff5d539b414b9d9a03f0ce9b58c76b707dc670afd5ad78c01

VMRay Threat Identifiers

Severity

Operation

5/5

Known malicious mutex name is created

4/5

Writes into the memory of another process

3/5

Modifies system configuration

2/5

Signed executable failed signature validation

1/5

Drops PE file

1/5

Modifies operating system directory

1/5

Timestamp manipulation

1/5

Creates process with hidden window

1/5

Installs system startup script or application

1/5

Creates a page with write and execute permissions

1/5

Enables process privileges

1/5

Modifies application directory

1/5

Obfuscates control flow

1/5

Resolves API functions dynamically

Virus

Injector

IZaHDboVov1O3ILF.exe

2026-02-21T20:26:31.200

Windows Exe (x86-32)

IZaHDboVov1O3ILF.exe

malicious

SHA256: b97f62a39e41fc92dbbb8b9b76ba77a8ac0a2946c31f29be6b98523247b2230a

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

3/5

Tries to open an unusually high number of parallel network connections

3/5

All network connection attempts failed

2/5

Allows invalid SSL certificates

1/5

Creates a page with write and execute permissions

1/5

Creates process with hidden window

1/5

Resolves API functions dynamically

1/5

Drops PE file

1/5

Executes dropped PE file

Ransomware

g9jSiVcPNzr6hdgO.exe

2026-02-21T20:24:10.839

Windows Exe (x86-32)

g9jSiVcPNzr6hdgO.exe

malicious

SHA256: ccc615289884003c03193b913e8322335dce3dc3a8db9cd6ccf419896f08d077

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

3/5

Tries to evade debugger

3/5

Modifies native system functions

2/5

Tries to detect kernel debugger

2/5

Tries to detect virtual machine

2/5

Makes direct system call to possibly evade hooking based monitoring

1/5

Drops PE file

1/5

Executes dropped PE file

1/5

Enumerates running processes

1/5

Tries to detect debugger

Trojan