Threat Feed
Foe3S6IA2NZiPK68.exe
2026-07-24T18:57:50.756
malicious
Windows Exe (x86-64)
Close
Foe3S6IA2NZiPK68.exe
malicious
SHA256:
db332523a02ce5b544599c9a6550764a01d1a71b0d356dafefd03f660fc2790a
VMRay Threat Identifiers
Close
Severity
Operation
5/5
Malicious content matched by YARA rules
3/5
Tries to evade debugger
3/5
Reads installed applications
2/5
Searches for sensitive mail data
2/5
Dead Drop Resolver
2/5
Searches for sensitive browser data
2/5
Searches for cryptocurrency wallet locations
1/5
Resolves API functions dynamically
1/5
Unusual large memory allocation
1/5
Overwrites code
1/5
Queries system time
1/5
Tries to detect debugger
1/5
Creates mutex
1/5
Query CPU Properties
1/5
Query OS Information
1/5
Enumerates running processes
Spyware
hkOiom29L6w1ObmU.exe
2026-07-24T18:57:36.760
malicious
Windows Exe (x86-32)
Close
hkOiom29L6w1ObmU.exe
malicious
SHA256:
3e5016bfcd2e7fff43b8bb1e241b497ab56560dcc0f059172c4c87c19c9f19bb
VMRay Threat Identifiers
Close
Severity
Operation
5/5
Malicious content matched by YARA rules
3/5
All network connection attempts failed
3/5
Suspicious content matched by YARA rules
2/5
Deletes file after execution
2/5
Hides files
2/5
Signed executable failed signature validation
1/5
Executes dropped PE file
1/5
Queries system time
1/5
Creates mutex
1/5
Modifies application directory
1/5
Content matched by YARA rules
1/5
Resolves API functions dynamically
1/5
A monitored process crashed
1/5
Drops PE file
Hacktool
lbRkrLgUOGcwazQq.exe
2026-07-24T18:55:45.760
malicious
Windows Exe (x86-64)
Close
lbRkrLgUOGcwazQq.exe
malicious
SHA256:
f854591cf57389dc7acae833d7ec4a47b5d59ad99591eb8695c070c0356e5010
VMRay Threat Identifiers
Close
Severity
Operation
5/5
Known malicious mutex name is created
2/5
Tries to detect virtual machine
1/5
Creates a page with write and execute permissions
1/5
Queries system time
1/5
Creates process with hidden window
1/5
Resolves API functions dynamically
Ransomware
aifNk0epxs7QGzRR.exe
2026-07-24T18:53:46.857
malicious
Windows Exe (x86-32)
Close
aifNk0epxs7QGzRR.exe
malicious
SHA256:
3915558a76ba8e9b1fbc33c11bf8da366ba235f2e2cc4170df7bea935c0f2200
VMRay Threat Identifiers
Close
Severity
Operation
5/5
Malicious content matched by YARA rules
4/5
Creates elevated child process
4/5
Creates a new process masquerading as a system process
3/5
Disables a crucial system service
2/5
Executes dropped PE masquerading Filename
2/5
Disables a system tool
2/5
Deletes file after execution
2/5
Delays execution
2/5
Creates an unusually large number of processes
2/5
Schedules task
2/5
Creates a new process from a system binary
2/5
Tries to detect analyzer sandbox
1/5
Timestamp manipulation
1/5
Installs system startup script or application
1/5
Installs system service
1/5
Creates a page with write and execute permissions
1/5
Masquerades file extension
1/5
Creates process with hidden window
1/5
Enables process privileges
1/5
Enumerates running processes
1/5
Queries system time
1/5
Modifies operating system directory
1/5
Possibly does reconnaissance
1/5
Content matched by YARA rules
1/5
Resolves API functions dynamically
1/5
A monitored process crashed
1/5
Drops PE file
1/5
Executes dropped PE file
Trojan
8VNIbT5CIRt2nUau.exe
2026-07-24T18:52:52.011
malicious
Windows Exe (x86-32)
Close
8VNIbT5CIRt2nUau.exe
malicious
SHA256:
daa45fb02acd557910a530c2d35d77d888e6c470ad89d74dcefdbb4dd7a5c3c4
VMRay Threat Identifiers
Close
Severity
Operation
5/5
Malicious content matched by YARA rules
2/5
Creates an unusually large number of processes
1/5
Reads mouse position
1/5
Monitors mouse movements and clicks
1/5
Monitors keyboard input
1/5
Content matched by YARA rules
1/5
Resolves API functions dynamically
1/5
Drops PE file
1/5
Creates a page with write and execute permissions
1/5
Executes dropped PE file
1/5
Queries system time
Virus