24:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/3fc9w1ah_nm2g.js"],"SampleDetailWrapper"] 3d:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T4cc,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Win/malicious_confidence_100% Sample 024e7212b730… — Score 84/100 — Hybrid Analysis","description":"Malicious verdict for sample 024e7212b730…. Malware family: Win/malicious_confidence_100%. Threat score 84/100. 6/27 AV engines flagged this file. 4 malicious and 15 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/024e7212b730e9879135785e1eaa0a49ef8fc14b502b7b15797f33239a9fc1e4","keywords":["Malicious","Win/malicious_confidence_100%","malware analysis","sandbox report","threat intelligence","024e7212b730e9879135785e1eaa0a49ef8fc14b502b7b15797f33239a9fc1e4"],"about":{"@type":"SoftwareApplication","name":"ungziped_file.exe","applicationCategory":["peexe","autoit","executable"],"identifier":"024e7212b730e9879135785e1eaa0a49ef8fc14b502b7b15797f33239a9fc1e4","additionalType":"Malicious sample"},"threatScore":84,"malwareFamily":"Win/malicious_confidence_100%","antivirusDetections":{"malicious":6,"total":27},"behavioralIndicators":{"malicious":4,"suspicious":15},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T538,Found reference to API "VirtualAllocEx" (Indicator: "VirtualAlloc"; File: "024e7212b730e9879135785e1eaa0a49ef8fc14b502b7b15797f33239a9fc1e4.bin") Found reference to API "VirtualAllocEx" (Indicator: "VirtualAllocEx"; File: "024e7212b730e9879135785e1eaa0a49ef8fc14b502b7b15797f33239a9fc1e4.bin") Found reference to API "VirtualAlloc" (Indicator: "VirtualAlloc"; File: "024e7212b730e9879135785e1eaa0a49ef8fc14b502b7b15797f33239a9fc1e4.bin") Found reference to API "VirtualFree" (Indicator: "VirtualFree"; File: "024e7212b730e9879135785e1eaa0a49ef8fc14b502b7b15797f33239a9fc1e4.bin") Found reference to API "CreateThread" (Indicator: "CreateThread"; File: "024e7212b730e9879135785e1eaa0a49ef8fc14b502b7b15797f33239a9fc1e4.bin") Found reference to API "WriteProcessMemory" (Indicator: "WriteProcessMemory"; File: "024e7212b730e9879135785e1eaa0a49ef8fc14b502b7b15797f33239a9fc1e4.bin") Found reference to API "VirtualFreeEx" (Indicator: "VirtualFree"; File: "024e7212b730e9879135785e1eaa0a49ef8fc14b502b7b15797f33239a9fc1e4.bin") Found reference to API "CreateThreadpoolTimer" (Indicator: "CreateThread"; File: "024e7212b730e9879135785e1eaa0a49ef8fc14b502b7b15797f33239a9fc1e4.bin") Found reference to API "CreateThreadpoolWait" (Indicator: "CreateThread"; File: "024e7212b730e9879135785e1eaa0a49ef8fc14b502b7b15797f33239a9fc1e4.bin")26:T445,Found reference to API "IcmpSendEcho" (Indicator: "IcmpSendEcho"; File: "024e7212b730e9879135785e1eaa0a49ef8fc14b502b7b15797f33239a9fc1e4.bin") Found reference to API "QueryPerformanceCounter" (Indicator: "QueryPerformanceCounter"; File: "024e7212b730e9879135785e1eaa0a49ef8fc14b502b7b15797f33239a9fc1e4.bin") Found reference to API "WaitForSingleObject" (Indicator: "WaitForSingleObject"; File: "024e7212b730e9879135785e1eaa0a49ef8fc14b502b7b15797f33239a9fc1e4.bin") Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTimeAsFileTime"; File: "024e7212b730e9879135785e1eaa0a49ef8fc14b502b7b15797f33239a9fc1e4.bin") Found reference to API "QueryPerformanceFrequency" (Indicator: "QueryPerformanceFrequency"; File: "024e7212b730e9879135785e1eaa0a49ef8fc14b502b7b15797f33239a9fc1e4.bin") Found reference to API "SetTimer" (Indicator: "SetTimer"; File: "024e7212b730e9879135785e1eaa0a49ef8fc14b502b7b15797f33239a9fc1e4.bin") Found reference to API "GetTickCount64" (Indicator: "GetTickCount64"; File: "024e7212b730e9879135785e1eaa0a49ef8fc14b502b7b15797f33239a9fc1e4.bin")27:T9c3,Assembly shows XOR instruction xor eax ebp in Stream UID: 38458-116-0042D975 Assembly shows XOR instruction xor ecx ebp in Stream UID: 38458-116-0042D975 Assembly shows XOR instruction xor eax ecx in Stream UID: 38458-2106-004027D9 Assembly shows XOR instruction xor ecx edx in Stream UID: 38458-2139-00487946 Assembly shows XOR instruction xor ebx 10h in Stream UID: 38458-2142-00486D80 Assembly shows XOR instruction xor eax 01h in Stream UID: 38458-2149-004865B6 Assembly shows XOR instruction xor eax 08h in Stream UID: 38458-2166-00462527 Assembly shows XOR instruction xor eax ebp in Stream UID: 38458-2245-0042E1DA Assembly shows XOR instruction xor ecx ebp in Stream UID: 38458-2245-0042E1DA Assembly shows XOR instruction xor eax ebp in Stream UID: 38458-2343-00429270 Assembly shows XOR instruction xor ecx ebp in Stream UID: 38458-2343-00429270 Assembly shows XOR instruction xor eax ebp in Stream UID: 38458-2344-00429650 Assembly shows XOR instruction xor ecx ebp in Stream UID: 38458-2344-00429650 Assembly shows XOR instruction xor bh byte ptr [ebp-42E5FFF5h] in Stream UID: 38458-2466-0045A920 Assembly shows XOR instruction xor byte ptr [ebp+eax-00000120h] 80h in Stream UID: 38458-2605-00460C11 Assembly shows XOR instruction xor al cl in Stream UID: 38458-2622-00460F4D Assembly shows XOR instruction xor byte ptr [ebp-60h] cl in Stream UID: 38458-2622-00460F4D Assembly shows XOR instruction xor byte ptr [ebp-5Fh] cl in Stream UID: 38458-2622-00460F4D Assembly shows XOR instruction xor byte ptr [ebp-000000EFh] cl in Stream UID: 38458-2622-00460F4D Assembly shows XOR instruction xor byte ptr [ebp-000000EEh] cl in Stream UID: 38458-2622-00460F4D Assembly shows XOR instruction xor byte ptr [ebp-000000A5h] cl in Stream UID: 38458-2622-00460F4D Assembly shows XOR instruction xor eax 000087BCh in Stream UID: 38458-2709-00469155 Assembly shows XOR instruction xor eax 0000A685h in Stream UID: 38458-2709-00469155 Assembly shows XOR instruction xor byte ptr [ebx+esi] al in Stream UID: 38458-2709-00469155 Assembly shows XOR instruction xor ebx 08h in Stream UID: 38458-2765-0046D07B Assembly shows XOR instruction xor dword ptr [ebp-04h] 08000000h in Stream UID: 38458-3023-004774AB Assembly shows XOR instruction xor eax 08000000h in Stream UID: 38458-3032-00477806 Assembly shows XOR instruction xor eax ecx in Stream UID: 38458-3235-00485D11 Assembly shows XOR instruction xor dh al in Stream UID: 38458-3245-0048BC5D28:Te9c,Found XOR loop in file "sample.bin" at offset 621754; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 855132; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 881317; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 884042; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 903011; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 926519; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 946687; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1164319; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1175811; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1178241; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1178381; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1182981; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1187255; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1188699; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 94069; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 242972; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 424930; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 425004; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 425188; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 425241; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 425270; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 545172; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 626666; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 632842; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 640549; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 640997; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 641573; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 642021; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 642773; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 643221; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 643797; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 644245; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 986331; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1073095; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1110078; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1150581; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1160271; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1164081; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1173569; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1185979; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 604284; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 616634; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 670423; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 773732; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 840684; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1127526; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1162072; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1167630; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1173172; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1178202; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1187236; code bytes = 803029:T775,"