Threat Feed | Online Malware Sandbox

URL

https://account-verify-system.netlify.app

malicious

SHA256:

VMRay Threat Identifiers

Severity

Operation

5/5

Combination of other detections indicates a phishing website

4/5

Phishing page detected via Machine Learning

4/5

Malicious host or URL detected via reputation

2/5

Page is served from a service commonly used for temporary hosting

1/5

Content is served from a user home directory

1/5

Page presents itself as a logon page

1/5

Logon form detected via Computer Vision

1/5

Loads image resources from another website

1/5

Resource is loaded from a service commonly used for temporary hosting

Phishing

https://elaborate-medovik-506f14.netlify.app

2026-11-01T09:01:28.515

URL

https://elaborate-medovik-506f14.netlify.app

malicious

SHA256:

VMRay Threat Identifiers

Severity

Operation

5/5

Combination of other detections indicates a phishing website

4/5

Malicious host or URL detected via reputation

4/5

Phishing page detected via Machine Learning

2/5

Page is served from a service commonly used for temporary hosting

1/5

Page contains a form with unusual text spacing

1/5

Logon form detected via Computer Vision

1/5

Resource is loaded from a service commonly used for temporary hosting

1/5

Content is served from a user home directory

1/5

Page presents itself as a logon page

1/5

Page contents are loaded dynamically

Phishing

https://oosoftlms.weebly.com

2026-11-01T09:01:07.729

URL

https://oosoftlms.weebly.com

malicious

SHA256:

VMRay Threat Identifiers

Severity

Operation

5/5

Combination of other detections indicates a phishing website

5/5

Malicious content matched by YARA rules

4/5

Phishing page detected via Machine Learning

4/5

Malicious host or URL detected via reputation

2/5

Branded Logon form detected via Computer Vision

2/5

Page is served from a service commonly used for temporary hosting

1/5

Content matched by YARA rules

1/5

Communicates via JSON RPC protocol

1/5

Resource is loaded from a service commonly used for temporary hosting

1/5

Page secured via a Domain Validated SSL certificate

1/5

Branding image detected via Computer Vision

Phishing

dttcodexgigas.afcadab6c8b3e2e5253670c85ec82aad9133ea56.exe

2026-11-01T08:59:30.091

Windows Exe (x86-64)

dttcodexgigas.afcadab6c8b3e2e5253670c85ec82aad9133ea56.exe

malicious

SHA256: 9e29b3470b00c0075f04329f7ae79fe8752d727ad48dbe052aae37004cdc782a

VMRay Threat Identifiers

Severity

Operation

5/5

Modifies content of user files

4/5

Uses a double file extension

4/5

Malicious file detected via reputation

3/5

Suspicious content matched by YARA rules

1/5

Installs system startup script or application

1/5

Unusual large memory allocation

1/5

Performs DNS request

1/5

Content matched by YARA rules

1/5

Resolves API functions dynamically

1/5

Drops PE file

1/5

Executes dropped PE file

1/5

Tries to detect application sandbox

1/5

Timestamp manipulation

1/5

Reads system data

1/5

Modifies application directory

1/5

Modifies operating system directory

Ransomware

dttcodexgigas.dd4f2dd416f732b768c9f2053707dc911bfd94d0.exe

2026-11-01T08:59:13.636

Windows Exe (x86-64)

dttcodexgigas.dd4f2dd416f732b768c9f2053707dc911bfd94d0.exe

malicious

SHA256: abf76fd06f69648db0f09c2a276c52b6cdf679c6d478cd12bb7bbfc2605ad4aa

VMRay Threat Identifiers

Severity

Operation

5/5

Modifies content of user files

4/5

Malicious file detected via reputation

4/5

Uses a double file extension

3/5

Suspicious content matched by YARA rules

1/5

Content matched by YARA rules

1/5

Resolves API functions dynamically

1/5

Tries to detect application sandbox

1/5

Executes dropped PE file

1/5

Timestamp manipulation

1/5

Modifies operating system directory

1/5

Installs system startup script or application

1/5

Unusual large memory allocation

1/5

Possibly does reconnaissance

1/5

Drops PE file

1/5

Reads system data

1/5

Modifies application directory

1/5

Performs DNS request

Ransomware