Threat Feed | Online Malware Sandbox

Windows Exe (x86-32)

fLptqRe2q5dpzr9A.exe

malicious

SHA256: e3c51a3a6cd45981d4bef78211d8c133098fbf641425d9eb9b08dc947c1c7a1f

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

5/5

Known malicious mutex name is created

2/5

Deletes file after execution

2/5

Delays execution

1/5

Executes dropped PE file

1/5

Drops PE file

1/5

Installs system startup script or application

1/5

Creates process with hidden window

1/5

Modifies operating system directory

Spyware

Trojan

gJGuuXjUeLwSlx74.exe

2026-07-14T18:45:13.184

Windows Exe (x86-32)

gJGuuXjUeLwSlx74.exe

malicious

SHA256: c18d36f363885672a616d3813cc0e600c888e5e7d24643ebdd68aa1f8b7465fc

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

2/5

Delays execution

1/5

Connects to remote host

1/5

Resolves API functions dynamically

1/5

Drops PE file

1/5

Queries system time

1/5

The binary file was created with a packer

1/5

Performs DNS request

Trojan

Worm

4zFwwCn4g8AaDZMP.exe

2026-07-14T18:45:04.807

Windows Exe (x86-32)

4zFwwCn4g8AaDZMP.exe

malicious

SHA256: c9682344a550c1d09046a7650e471f4bc00cf60981113081bc7dfc3f047777b5

VMRay Threat Identifiers

Severity

Operation

5/5

Combination of other detections shows multiple input capture behaviors

3/5

Reads installed applications

3/5

Captures clipboard data

3/5

Monitors user input

2/5

Deletes file after execution

2/5

Searches for sensitive browser data

2/5

Schedules task

2/5

Delays execution

2/5

Searches for sensitive mail data

2/5

Searches for sensitive application data

1/5

Installs system service

1/5

Resolves API functions dynamically

1/5

Drops PE file

1/5

Executes dropped PE file

1/5

Enables process privileges

1/5

Possibly does reconnaissance

1/5

Enumerates running processes

1/5

Checks Internet connection

1/5

Queries system time

1/5

Modifies operating system directory

1/5

Creates process with hidden window

Spyware

7qyxc1vAnwAOZKUA.exe

2026-07-14T18:39:55.045

Windows Exe (x86-32)

7qyxc1vAnwAOZKUA.exe

malicious

SHA256: 9a0b511e7ce89086420898f65a6840e8df5b347022857e5ebce8760a82772af7

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

2/5

Deletes file after execution

1/5

Installs system startup script or application

1/5

Enumerates running processes

1/5

Checks Internet connection

1/5

Creates process with hidden window

1/5

Modifies operating system directory

1/5

Content matched by YARA rules

1/5

Resolves API functions dynamically

1/5

Detects filename manipulation

1/5

Drops PE file

1/5

Creates a page with write and execute permissions

1/5

Executes dropped PE file

1/5

Queries system time

Ransomware

OsxKa90TWWjT2Uol.exe

2026-07-14T18:37:30.588

Windows Exe (x86-32)

OsxKa90TWWjT2Uol.exe

malicious

SHA256: 2dce1a05efa9397abd0dd8dd1e715bab83afc4a84ceeecff0262a5c945d010c7

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

3/5

Suspicious content matched by YARA rules

3/5

All network connection attempts failed

2/5

Hides files

2/5

Deletes file after execution

2/5

Signed executable failed signature validation

1/5

Executes dropped PE file

1/5

Queries system time

1/5

Creates mutex

1/5

Modifies application directory

1/5

Content matched by YARA rules

1/5

Resolves API functions dynamically

1/5

Detects filename manipulation

1/5

Drops PE file

Hacktool