Threat Feed | Online Malware Sandbox

Windows Exe (x86-64)

JVGNVrgGox8WRhio.exe

malicious

SHA256: cd4615f533b599a15d0b387e49c794bdaa94d2ab04524a59b2493aca15f63036

VMRay Threat Identifiers

Severity

Operation

5/5

Known malicious mutex name is created

4/5

Malicious file detected via reputation

2/5

Tries to detect virtual machine

1/5

Possibly does reconnaissance

1/5

Creates a page with write and execute permissions

1/5

Resolves API functions dynamically

1/5

A monitored process crashed

1/5

Modifies application directory

1/5

Queries system time

Ransomware

I0qka9AW9msdsMUL.exe

2026-08-06T19:50:39.824

Windows Exe (x86-64)

I0qka9AW9msdsMUL.exe

malicious

SHA256: f40cd4f30b5027af8bb3a7bc96a732082b97c525a8f1443a142c48ebffde014e

VMRay Threat Identifiers

Severity

Operation

5/5

Known malicious mutex name is created

4/5

Malicious file detected via reputation

2/5

Tries to detect virtual machine

1/5

Possibly does reconnaissance

1/5

Creates a page with write and execute permissions

1/5

Resolves API functions dynamically

1/5

A monitored process crashed

1/5

Modifies application directory

1/5

Queries system time

Ransomware

bin.exe

2026-08-06T19:46:04.613

Windows Exe (x86-64)

bin.exe

malicious

SHA256: f0e29d11e1800cf4ef616458f74cd3cfccd0e39559423344e92574fc78023259

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

4/5

Malicious file detected via reputation

4/5

Makes indirect system call to possibly evade hooking based monitoring

4/5

Modifies control flow of another process

4/5

Writes into the memory of another process

3/5

Captures clipboard data

2/5

Creates a new process from a system binary

2/5

Searches for sensitive browser data

2/5

Reads sensitive browser data

2/5

Tries to detect kernel debugger

2/5

Delays execution

1/5

Tries to detect debugger

1/5

Creates process with hidden window

1/5

Reads from memory of another process

1/5

Performs DNS request

1/5

Connects to remote host

1/5

Downloads file

1/5

A monitored process crashed

1/5

Creates mutex

1/5

Query OS Information

1/5

Possibly does reconnaissance

1/5

Enumerates running processes

Spyware

Injector

KMPli3yw2TW15k5b.exe

2026-08-06T19:38:13.026

Windows Exe (x86-64)

KMPli3yw2TW15k5b.exe

malicious

SHA256: cf88543bb98251d2ef204a64ee106ca3c3a4f9e7bfbeafb1e9b2d9caa4de4ad6

VMRay Threat Identifiers

Severity

Operation

5/5

Known malicious mutex name is created

4/5

Malicious file detected via reputation

2/5

Tries to detect virtual machine

1/5

Possibly does reconnaissance

1/5

Creates a page with write and execute permissions

1/5

Resolves API functions dynamically

1/5

Creates mutex

1/5

Queries system time

1/5

Modifies application directory

Ransomware

https://yuixszc.vercel.app

2026-08-06T19:37:12.830

URL

https://yuixszc.vercel.app

malicious

SHA256:

VMRay Threat Identifiers

Severity

Operation

5/5

TelegramPhishkit configuration was extracted

5/5

Combination of other detections indicates a phishing website

4/5

Malicious host or URL detected via reputation

4/5

Phishing page detected via Machine Learning

4/5

Malicious content matched by YARA rules

3/5

Suspicious content matched by YARA rules

3/5

Dynamically loads branding image via third-party API

2/5

Page is served from a service commonly used for temporary hosting

2/5

Suspicious content matched by YARA rules

1/5

Page presents itself as a logon page

1/5

Page secured via a Domain Validated SSL certificate

1/5

Logon form detected via Computer Vision

1/5

Content matched by YARA rules

Phishing