Threat Feed | Online Malware Sandbox

Windows Exe (x86-32)

kzOhHZ8UigbgzbxA.exe

malicious

SHA256: c41d83eca88713c33be63c1c3e51504ab98a70e71fa9de6448471e98e0f001e4

VMRay Threat Identifiers

Severity

Operation

5/5

Known malicious mutex name is created

5/5

Malicious content matched by YARA rules

3/5

Modifies native system functions

1/5

Tries to detect debugger

1/5

Queries system time

1/5

Resolves API functions dynamically

1/5

Drops PE file

1/5

The binary file was created with a packer

1/5

Uncommon PE properties

1/5

Executes dropped PE file

1/5

Creates process with hidden window

1/5

Modifies application directory

1/5

Creates a page with write and execute permissions

1/5

Reads from memory of another process

Trojan

Virus

1upTo1taliXgQAKN.exe

2026-07-22T19:18:06.718

Windows Exe (x86-32)

1upTo1taliXgQAKN.exe

malicious

SHA256: 9da71b9fbd5ad7affae0ddff31b967476178a6b52fe19a44f92cb2cca7b6c2c4

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

3/5

Tries to evade debugger

3/5

Modifies native system functions

2/5

Tries to detect kernel debugger

2/5

Tries to detect virtual machine

2/5

Makes direct system call to possibly evade hooking based monitoring

1/5

Queries system time

1/5

Drops PE file

1/5

Executes dropped PE file

1/5

Enumerates running processes

1/5

Tries to detect debugger

Trojan

gglwD5Px8NyTBqeJ.exe

2026-07-22T19:16:47.742

Windows Exe (x86-32)

gglwD5Px8NyTBqeJ.exe

malicious

SHA256: 168ff4dde438c40836f838cf35a2138f722caad5cf33fc5ad03e9dc41e507a24

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

3/5

Suspicious content matched by YARA rules

2/5

Signed executable failed signature validation

1/5

Content matched by YARA rules

Backdoor

Trojan

3uUGmBNvph0QDKAN.exe

2026-07-22T19:11:06.919

Windows Exe (x86-32)

3uUGmBNvph0QDKAN.exe

malicious

SHA256: 213d10fd58240e3c6da479deeaef6102b1d4a524d95fe8273f22ab2363bbdf69

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

2/5

Delays execution

1/5

Connects to remote host

1/5

Resolves API functions dynamically

1/5

Creates an unusually large number of files

1/5

Drops PE file

1/5

Queries system time

1/5

The binary file was created with a packer

1/5

Performs DNS request

Trojan

Worm

cFcuLZm7oA6OciBC.exe

2026-07-22T19:08:38.172

Windows Exe (x86-32)

cFcuLZm7oA6OciBC.exe

malicious

SHA256: 742da9f096ad14fd37f167bee103960755cb66b2d9c5e9eee91da9c03521d08a

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

2/5

Allows invalid SSL certificates

1/5

Creates process with hidden window

1/5

Creates a page with write and execute permissions

1/5

Resolves API functions dynamically

1/5

Drops PE file

1/5

Executes dropped PE file

Ransomware