Threat Feed | Online Malware Sandbox

Windows Exe (x86-64)

sRAPOqQkuUkWRbpM.exe

malicious

SHA256: c8310de815f9f75353be03f366712261c622e51e0958afab582a551aaa9cae42

VMRay Threat Identifiers

Severity

Operation

5/5

Tries to read cached credentials of various applications

4/5

Malicious file detected via reputation

2/5

Reads network adapter information

2/5

Searches for sensitive browser data

2/5

Reads sensitive browser data

2/5

Searches for sensitive mail data

2/5

Sets up server that accepts incoming connections

1/5

Resolves API functions dynamically

1/5

Performs DNS request

1/5

Kills process

1/5

Creates process with hidden window

1/5

Creates mutex

1/5

Unusual large memory allocation

1/5

Connects to remote host

1/5

Content matched by YARA rules

Spyware

wfan88DfRHG5hhR2.exe

2026-08-17T10:37:18.506

Windows Exe (x86-64)

wfan88DfRHG5hhR2.exe

malicious

SHA256: 23bca2002c71e31b44c7719e20157aa7ba48d69f06b37ee9890373374ac1e2a8

VMRay Threat Identifiers

Severity

Operation

5/5

Known malicious mutex name is created

4/5

Malicious file detected via reputation

2/5

Tries to detect virtual machine

1/5

Creates process with hidden window

1/5

Creates a page with write and execute permissions

1/5

Resolves API functions dynamically

1/5

A monitored process crashed

1/5

Modifies application directory

1/5

Queries system time

Ransomware

RR3DEn3Nw9X84TQb.exe

2026-08-17T10:33:01.354

Windows Exe (x86-32)

RR3DEn3Nw9X84TQb.exe

malicious

SHA256: 39a8444b885269ce426355cff7db4f4c9cdeb49b65fa770129a4646e44f81a02

VMRay Threat Identifiers

Severity

Operation

5/5

Known malicious mutex name is created

5/5

Malicious content matched by YARA rules

4/5

Malicious file detected via reputation

3/5

Redirect program startups

2/5

Searches for sensitive password manager data

2/5

Searches for sensitive remote access configuration data

2/5

Searches for sensitive application data

2/5

Searches for sensitive browser data

1/5

Content matched by YARA rules

1/5

Modifies application directory

1/5

Modifies operating system directory

1/5

Drops PE file

1/5

Executes dropped PE file

1/5

Timestamp manipulation

Backdoor

Virus

cuoaux7vnlVhKu5C.exe

2026-08-17T10:24:09.135

Windows Exe (x86-32)

cuoaux7vnlVhKu5C.exe

malicious

SHA256: f4eac25f63c155a5fce3568c77ef164f047d5306ca2cd8d4bba156677da333bc

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

4/5

Malicious file detected via reputation

4/5

Malicious host or URL detected via reputation

2/5

Allows invalid SSL certificates

2/5

Enables critical process privileges

1/5

Connects to remote host

1/5

URL contains a TLD highly associated with phishing

1/5

Content matched by YARA rules

1/5

Drops PE file

1/5

Executes dropped PE file

1/5

Installs system service

1/5

Queries system time

1/5

Enumerates running processes

1/5

Modifies operating system directory

1/5

Creates mutex

1/5

Performs DNS request

1/5

Enables process privileges

Ransomware

0JlykrP5msl14Dhk.exe

2026-08-17T10:22:27.386

Windows Exe (x86-64)

0JlykrP5msl14Dhk.exe

malicious

SHA256: 25fd787f7430100f64d22e4aa1fd21efdfbcebdb57a3619d0deed1548ebb9549

VMRay Threat Identifiers

Severity

Operation

5/5

Known malicious mutex name is created

4/5

Malicious file detected via reputation

2/5

Sends control codes to a driver

2/5

Tries to detect virtual machine

1/5

Accesses volumes directly

1/5

Creates a page with write and execute permissions

1/5

Queries system time

1/5

Resolves API functions dynamically

1/5

Creates mutex

1/5

Modifies application directory

Ransomware