24:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/3fc9w1ah_nm2g.js"],"SampleDetailWrapper"] 3a:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T48f,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Mint.Zard.Generic Sample 027decc4e417… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 027decc4e417…. Malware family: Mint.Zard.Generic. Threat score 100/100. 15/28 AV engines flagged this file. 6 malicious and 14 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/027decc4e4173fad5c92070f94df236135f3e3a472eb5d9351521295bacac4e7","keywords":["Malicious","Mint.Zard.Generic","malware analysis","sandbox report","threat intelligence","027decc4e4173fad5c92070f94df236135f3e3a472eb5d9351521295bacac4e7"],"about":{"@type":"SoftwareApplication","name":"file.exe","applicationCategory":["peexe","executable"],"identifier":"027decc4e4173fad5c92070f94df236135f3e3a472eb5d9351521295bacac4e7","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Mint.Zard.Generic","antivirusDetections":{"malicious":15,"total":28},"behavioralIndicators":{"malicious":6,"suspicious":14},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T7a7," HTTP/1.1 200 OK Date: Sat 09 May 2026 11:06:23 GMT Content-Type: text/plain Content-Length: 14 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET set-cookie: __cf_bm=DGzM.MjS9owHax9.6HqcqHHG8dTAIBJzvd0zbnJi.0Q-1778324783.7322702-1.0.1.1-t8cTMz.se5SkiQw7Ui50aPdmUDN2WGWZ9hqA9plJq8aE46etz3hlhJP4RE6u2PDegk3IB7LRXmB5y1VkBWcoQf10l75otLtQdBC8qFSjadKjt7xwwMUMlY49juUQU2VK; HttpOnly; Path=/; Domain=icanhazip.com; Expires=Sat 09 May 2026 11:36:23 GMT Server: cloudflare CF-RAY: 9f903c0a5ce4ad01-SJC alt-svc: h3=":443"; ma=86400 with response body ==>36342E3132342E31322E3136320A....... "GET /1/n.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/202.0.4664.110 Safari/537.36 Host: 130.12.180.190" Response ==> HTTP/1.1 500 Internal Server Error Server: nginx/1.18.0 (Ubuntu) Date: Sat 09 May 2026 11:06:24 GMT Content-Type: text/html Content-Length: 588 Connection: close with response body ==>3C68746D6C3E0D0A3C686561643E3C7469746C653E35303020496E7465726E616C20536572766572204572726F723C2F7469746C653E3C2F686561643E0D0A3C.......2e:T725,"" (Indicator: "GetDC"; Source: "00000000-00001376.00000000.230444.00970000.00000004.mdmp, 00000000-00001376.00000001.232365.00970000.00000004.mdmp, 00000000-00001376.00000002.234285.00970000.00000004.mdmp, 00000000-00001376.00000003.239788.00970000.00000004.mdmp") Found reference to API "" (Indicator: "GetDC"; Source: "00000000-00001376.00000000.230444.00970000.00000004.mdmp, 00000000-00001376.00000001.232365.00970000.00000004.mdmp, 00000000-00001376.00000002.234285.00970000.00000004.mdmp, 00000000-00001376.00000003.239788.00970000.00000004.mdmp") Found reference to API "" (Indicator: "GetWindowDC"; Source: "00000000-00001376.00000000.230444.00970000.00000004.mdmp, 00000000-00001376.00000001.232365.00970000.00000004.mdmp, 00000000-00001376.00000002.234285.00970000.00000004.mdmp, 00000000-00001376.00000003.239788.00970000.00000004.mdmp") Found reference to API "" (Indicator: "CreateDC"; Source: "00000000-00001376.00000000.230444.00970000.00000004.mdmp, 00000000-00001376.00000001.232365.00970000.00000004.mdmp, 00000000-00001376.00000002.234285.00970000.00000004.mdmp, 00000000-00001376.00000003.239788.00970000.00000004.mdmp") Found reference to API "" (Indicator: "CreateDC"; Source: "00000000-00001376.00000000.230444.00970000.00000004.mdmp, 00000000-00001376.00000001.232365.00970000.00000004.mdmp, 00000000-00001376.00000002.234285.00970000.00000004.mdmp, 00000000-00001376.00000003.239788.00970000.00000004.mdmp") Found reference to API "" (Indicator: "CreateCompatibleBitmap"; Source: "00000000-00001376.00000000.230444.00970000.00000004.mdmp, 00000000-00001376.00000001.232365.00970000.00000004.mdmp, 00000000-00001376.00000002.234285.00970000.00000004.mdmp, 00000000-00001376.00000003.239788.00970000.00000004.mdmp") Found reference to API "" (Indicator: "BitBlt"; Source: "00000000-00001376.00000000.230444.00970000.00000004.mdmp, 00000000-00001376.00000001.232365.00970000.00000004.mdmp, 00000000-00001376.00000002.234285.00970000.00000004.mdmp, 00000000-00001376.00000003.239788.00970000.00000004.mdmp") Found reference to API "" (Indicator: "CreateCompatibleDC"; Source: "00000000-00001376.00000000.230444.00970000.00000004.mdmp, 00000000-00001376.00000001.232365.00970000.00000004.mdmp, 00000000-00001376.00000002.234285.00970000.00000004.mdmp, 00000000-00001376.00000003.239788.00970000.00000004.mdmp")37:T9e1,"\" (Indicator: \"CallWindowProc\"; Source: \"00000000-00001376.00000000.230444.00970000.00000004.mdmp, 00000000-00001376.00000001.232365.00970000.00000004.mdmp, 00000000-00001376.00000002.234285.00970000.00000004.mdmp, 00000000-00001376.00000003.239788.00970000.00000004.mdmp\")","origin":"File/Memory","mitre_attack_id":"T1564.003","relevance":1,"id":"string-320","sources":[{"report_type":"sandbox","report_id":"69ff15126cd317d09d04c9cc"}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Observed a high volume of repeated registry API calls (API Hammering)","description":"$25","origin":"Registry Access","mitre_attack_id":"T1497","relevance":7,"id":"registry-215","sources":[{"report_type":"sandbox","report_id":"69ff15126cd317d09d04c9cc"}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Queries process information","description":"\"\" (Indicator: \"enumchildwindows\"; Source: \"00000000-00001376.00000000.230444.00970000.00000004.mdmp, 00000000-00001376.00000001.232365.00970000.00000004.mdmp, 00000000-00001376.00000002.234285.00970000.00000004.mdmp, 00000000-00001376.00000003.239788.00970000.00000004.mdmp\")","origin":"File/Memory","mitre_attack_id":"T1055.015","relevance":1,"id":"string-721","sources":[{"report_type":"sandbox","report_id":"69ff15126cd317d09d04c9cc"}]},{"level":"informative","category":"Environment Awareness","name":"Attempts to call APIs commonly associated with anti-analysis and evasion techniques","description":"\" Microsoft\"","origin":"Static Parser","mitre_attack_id":"T1027.002","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"69ff15126cd317d09d04c9cc"}]},{"level":"informative","category":"Unusual Characteristics","name":"Reads the windows installation language","description":"\"