Threat Feed
ok.exe
2026-10-28T15:00:57.752
malicious
Windows Exe (x86-64)
Close
ok.exe
malicious
SHA256:
f1e5b95a04d98e47287ec5d3eb514e285aebc126515a6599bff65f1498245bff
VMRay Threat Identifiers
Close
Severity
Operation
5/5
Malicious content matched by YARA rules
5/5
XMRig configuration was extracted
4/5
Malicious content matched by YARA rules
4/5
Loads a known vulnerable file
3/5
Executes code with kernel privileges
3/5
Suspicious file detected via reputation
2/5
Sends control codes to a driver
2/5
Reads network adapter information
2/5
Creates an unusually large number of processes
2/5
Sets up server that accepts incoming connections
2/5
Schedules task
1/5
Connects to remote host
1/5
Performs DNS request
1/5
Reads system data
1/5
Resolves API functions dynamically
1/5
Tries to detect virtual machine
1/5
Enables process privileges
1/5
Unusual large memory allocation
1/5
Drops PE file
1/5
Queries system time
1/5
Executes dropped PE file
1/5
Query OS Information
1/5
Content matched by YARA rules
PUA
Miner
123.exe
2026-10-28T15:00:52.178
malicious
Windows Exe (x86-64)
Close
123.exe
malicious
SHA256:
da1d35e6911faa56dc7aa38f56723f38e46e3fdd4ddca6a1dc30d1d2b9f577cc
VMRay Threat Identifiers
Close
Severity
Operation
5/5
Malicious content matched by YARA rules
5/5
XMRig configuration was extracted
4/5
Loads a known vulnerable file
4/5
Malicious file detected via reputation
4/5
Malicious content matched by YARA rules
3/5
Executes code with kernel privileges
3/5
Suspicious file detected via reputation
2/5
Sends control codes to a driver
2/5
Reads network adapter information
2/5
Creates an unusually large number of processes
2/5
Sets up server that accepts incoming connections
1/5
Content matched by YARA rules
1/5
Connects to remote host
1/5
Performs DNS request
1/5
Reads system data
1/5
Resolves API functions dynamically
1/5
Tries to detect virtual machine
1/5
Enables process privileges
1/5
Unusual large memory allocation
1/5
Drops PE file
1/5
Executes dropped PE file
1/5
Query OS Information
1/5
Queries system time
PUA
Miner
ok.exe
2026-10-28T15:00:47.225
malicious
Windows Exe (x86-64)
Close
ok.exe
malicious
SHA256:
1bd84eabf97b2cfe77d0260168c984b81abf0a4f2219165f4a6e875f9419286d
VMRay Threat Identifiers
Close
Severity
Operation
5/5
Malicious content matched by YARA rules
5/5
XMRig configuration was extracted
4/5
Malicious content matched by YARA rules
4/5
Loads a known vulnerable file
3/5
Executes code with kernel privileges
3/5
Suspicious file detected via reputation
2/5
Sends control codes to a driver
2/5
Reads network adapter information
2/5
Creates an unusually large number of processes
2/5
Sets up server that accepts incoming connections
2/5
Schedules task
1/5
Connects to remote host
1/5
Performs DNS request
1/5
Reads system data
1/5
Resolves API functions dynamically
1/5
Tries to detect virtual machine
1/5
Enables process privileges
1/5
Unusual large memory allocation
1/5
Drops PE file
1/5
Queries system time
1/5
Executes dropped PE file
1/5
Query OS Information
1/5
Content matched by YARA rules
PUA
Miner
123.exe
2026-10-28T15:00:01.659
malicious
Windows Exe (x86-64)
Close
123.exe
malicious
SHA256:
a1dbc7d345f5c324274c7c9d72cce59c51c51501dcd8348b61ccd4e58383d221
VMRay Threat Identifiers
Close
Severity
Operation
5/5
Malicious content matched by YARA rules
5/5
XMRig configuration was extracted
4/5
Malicious file detected via reputation
4/5
Loads a known vulnerable file
4/5
Malicious content matched by YARA rules
3/5
Executes code with kernel privileges
3/5
Suspicious file detected via reputation
2/5
Sends control codes to a driver
2/5
Reads network adapter information
2/5
Sets up server that accepts incoming connections
2/5
Creates an unusually large number of processes
1/5
Executes dropped PE file
1/5
Content matched by YARA rules
1/5
Unusual large memory allocation
1/5
Query OS Information
1/5
Enables process privileges
1/5
Reads system data
1/5
Performs DNS request
1/5
Connects to remote host
1/5
Queries system time
1/5
Resolves API functions dynamically
1/5
Tries to detect virtual machine
1/5
Drops PE file
PUA
Miner
123.exe
2026-10-28T14:58:06.170
malicious
Windows Exe (x86-64)
Close
123.exe
malicious
SHA256:
07be697872611d525e3489e29b3111b9b77eb98a24141fc6b37de72ea854af1d
VMRay Threat Identifiers
Close
Severity
Operation
5/5
XMRig configuration was extracted
5/5
Malicious content matched by YARA rules
4/5
Malicious file detected via reputation
4/5
Loads a known vulnerable file
4/5
Malicious content matched by YARA rules
3/5
Suspicious file detected via reputation
3/5
Executes code with kernel privileges
2/5
Schedules task
2/5
Creates an unusually large number of processes
2/5
Sends control codes to a driver
2/5
Sets up server that accepts incoming connections
2/5
Reads network adapter information
1/5
Unusual large memory allocation
1/5
Query OS Information
1/5
Enables process privileges
1/5
Reads system data
1/5
Performs DNS request
1/5
Connects to remote host
1/5
Content matched by YARA rules
1/5
Resolves API functions dynamically
1/5
Tries to detect virtual machine
1/5
Drops PE file
1/5
Executes dropped PE file
1/5
Queries system time
PUA
Miner