Threat Feed | Online Malware Sandbox

Windows Exe (x86-32)

96JAQJX3kiUYVWng.exe

malicious

SHA256: 7077ae1e3893e9f7694e237232d46de25847525aa046e5489e94b9ff1ee8c331

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

3/5

Tries to evade debugger

2/5

Hides files

2/5

Tries to detect virtual machine

1/5

Executes dropped PE file

1/5

Detects filename manipulation

1/5

Obfuscates control flow

1/5

Tries to detect debugger

1/5

Drops PE file

Trojan

l5OAKU7UfStFg6aX.exe

2026-06-06T16:36:42.235

Windows Exe (x86-32)

l5OAKU7UfStFg6aX.exe

malicious

SHA256: bdba525557e3cf7d28a3536d03466ceabef7eed3262c95804fbc9199866d9b7f

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

5/5

Known malicious mutex name is created

4/5

Malicious content matched by YARA rules

2/5

Deletes file after execution

2/5

Delays execution

2/5

Suspicious content matched by YARA rules

1/5

Drops PE file

1/5

Installs system startup script or application

1/5

Creates process with hidden window

1/5

Modifies operating system directory

1/5

Executes dropped PE file

Spyware

Trojan

8yL3Lxc222TQFtSf.exe

2026-06-06T16:35:32.043

Windows Exe (x86-32)

8yL3Lxc222TQFtSf.exe

malicious

SHA256: 11f2716aa6bb86e762784b98fffe5c2a7b2165ea92dbbc87be9c591c0731e2aa

VMRay Threat Identifiers

Severity

Operation

5/5

Combination of other detections shows multiple input capture behaviors

3/5

Captures clipboard data

3/5

Connects to SMB share

3/5

Reads installed applications

3/5

Monitors user input

2/5

Searches for sensitive application data

2/5

Deletes file after execution

2/5

Searches for sensitive browser data

2/5

Delays execution

2/5

Schedules task

2/5

Searches for sensitive mail data

1/5

Checks Internet connection

1/5

Enables process privileges

1/5

Modifies operating system directory

1/5

Creates process with hidden window

1/5

Installs system service

1/5

Possibly does reconnaissance

1/5

Enumerates running processes

1/5

Resolves API functions dynamically

1/5

Drops PE file

1/5

Executes dropped PE file

Spyware

aesde.exe

2026-06-06T16:33:47.467

Windows Exe (x86-64)

aesde.exe

malicious

SHA256: 161e25e9bff516913bb9e9a4add7a76181112d5a9c9a618a4ff9e75403992cd9

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

3/5

Suspicious content matched by YARA rules

2/5

Queries a host's domain name

1/5

Resolves API functions dynamically

Hacktool

jQliGiwYkfO33cLX.exe

2026-06-06T16:33:06.515

Windows Exe (x86-32)

jQliGiwYkfO33cLX.exe

malicious

SHA256: 4bfc8d20cb2a4c8f59f26fb25ffc80d60f75c35055f489ecd8e3a19b3520729a

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

3/5

Deletes file after execution

2/5

Deletes file after execution

2/5

Allows invalid SSL certificates

2/5

Enables critical process privileges

1/5

Creates process with hidden window

1/5

Performs DNS request

1/5

Connects to remote host

1/5

URL contains a TLD highly associated with phishing

1/5

Resolves API functions dynamically

1/5

Drops PE file

1/5

The binary file was created with a packer

1/5

Enables process privileges

1/5

Executes dropped PE file

1/5

Modifies operating system directory

1/5

Creates mutex

1/5

Enumerates running processes

1/5

Installs system service

Ransomware