Threat Feed | Online Malware Sandbox

Windows Exe (x86-32)

ZmuJk9OtLksnA9vf.exe

malicious

SHA256: ed66b1b9971dce41b9cfe65d9c5891658dd4e5aae3172ffc0621d15316949cb3

VMRay Threat Identifiers

Severity

Operation

4/5

Malicious file detected via reputation

4/5

Writes into the memory of another process

4/5

Modifies control flow of another process

2/5

Schedules task

2/5

Delays execution

1/5

Enumerates running processes

1/5

Resolves API functions dynamically

1/5

Creates an unusually large number of files

1/5

Drops PE file

1/5

Installs system service

1/5

Executes dropped PE file

1/5

Creates a page with write and execute permissions

1/5

Queries system time

1/5

Creates process with hidden window

1/5

Tries to detect debugger

1/5

Unusual large memory allocation

1/5

Enables process privileges

1/5

Installs system startup script or application

Injector

HpOABgNjh0RXB5Tn.exe

2026-09-07T13:41:38.393

Windows Exe (x86-32)

HpOABgNjh0RXB5Tn.exe

malicious

SHA256: 016326e7becaa42c6312e6280dba87fb2e4dee9ebc574fffa5910b6ca317ab11

VMRay Threat Identifiers

Severity

Operation

4/5

Modifies control flow of another process

4/5

Malicious file detected via reputation

4/5

Writes into the memory of another process

2/5

Schedules task

2/5

Delays execution

1/5

Enumerates running processes

1/5

Creates a page with write and execute permissions

1/5

Resolves API functions dynamically

1/5

Creates an unusually large number of files

1/5

Drops PE file

1/5

Installs system service

1/5

Executes dropped PE file

1/5

Queries system time

1/5

Installs system startup script or application

1/5

Tries to detect debugger

1/5

Enables process privileges

1/5

Unusual large memory allocation

1/5

Creates process with hidden window

Injector

http://49.51.43.12/v3/signin/identifier?amp%3Bfollowup=https%3A%2F%2Faccounts.google.com%2F&amp%3Bifkv=ASKXGp36_CB8HzfrpuLLHTVjXxiUGDwO6Tj8yz4QrsaGyc3I4H4G7NxTTQJtpw0j07g9O5T5Tx4uyQ&amp%3Bpassive=1209600&continue=https%3A%2F%2Faccounts.google.com%2F&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AeYxHgdKYnDh7f06p3nY0_g5Kv2xJ3BJGaYhMidcF8f1pw0dzzA3e867ArQl5eMShDQAzqNK7vc8uw&dsh=S185893157%3A1788785333297182

2026-09-07T13:37:49.248

URL

malicious

SHA256:

VMRay Threat Identifiers

Severity

Operation

5/5

Combination of other detections indicates a phishing website

4/5

Malicious host or URL detected via reputation

2/5

Page uses exact same title as that of a popular online service

2/5

Branded Logon form detected via Computer Vision

1/5

Branding image detected via Computer Vision

1/5

Page presents itself as a logon page

1/5

HTTPS page insecurely loads resources via HTTP

Phishing

opI1k9ftrRzIt5rz.exe

2026-09-07T13:37:33.622

Windows Exe (x86-32)

opI1k9ftrRzIt5rz.exe

malicious

SHA256: 0a65c9dad0941b376320d173c4a230c39ecca80f799e4ded9023461b9393fa03

VMRay Threat Identifiers

Severity

Operation

4/5

Malicious file detected via reputation

4/5

Writes into the memory of another process

4/5

Modifies control flow of another process

2/5

Delays execution

2/5

Schedules task

1/5

Installs system startup script or application

1/5

Resolves API functions dynamically

1/5

Creates an unusually large number of files

1/5

Drops PE file

1/5

Installs system service

1/5

Queries system time

1/5

Executes dropped PE file

1/5

Tries to detect debugger

1/5

Enables process privileges

1/5

Creates a page with write and execute permissions

1/5

Enumerates running processes

Injector

vUDg2ey7OYGfP2R7.exe

2026-09-07T13:36:36.201

Windows Exe (x86-32)

vUDg2ey7OYGfP2R7.exe

malicious

SHA256: 205cfe858aa8ec9d64e3392d21c16d0c244bd870c0eabbb0722b608dec8c7fef

VMRay Threat Identifiers

Severity

Operation

4/5

Writes into the memory of another process

4/5

Modifies control flow of another process

4/5

Malicious file detected via reputation

2/5

Schedules task

2/5

Delays execution

1/5

Creates an unusually large number of files

1/5

Installs system service

1/5

Creates a page with write and execute permissions

1/5

Queries system time

1/5

Installs system startup script or application

1/5

Tries to detect debugger

1/5

Enables process privileges

1/5

Enumerates running processes

1/5

Resolves API functions dynamically

Injector