24:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/3fc9w1ah_nm2g.js"],"SampleDetailWrapper"] 3b:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T49a,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Trojan.NanoCore Sample 112d957b56a0… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 112d957b56a0…. Malware family: Trojan.NanoCore. Threat score 100/100. 23/28 AV engines flagged this file. 10 malicious and 19 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/112d957b56a0ccec1e06defc317c8b7b169b6e74514d1a6f7bee8c2b32b080ae","keywords":["Malicious","Trojan.NanoCore","malware analysis","sandbox report","threat intelligence","112d957b56a0ccec1e06defc317c8b7b169b6e74514d1a6f7bee8c2b32b080ae"],"about":{"@type":"SoftwareApplication","name":"gwwsite.nl.exe","applicationCategory":["peexe","assembly","executable"],"identifier":"112d957b56a0ccec1e06defc317c8b7b169b6e74514d1a6f7bee8c2b32b080ae","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Trojan.NanoCore","antivirusDetections":{"malicious":23,"total":28},"behavioralIndicators":{"malicious":10,"suspicious":19},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T4ba,Found reference to "DESCryptoServiceProvider" (Indicator: "DESCryptoServiceProvider"; File: "112d957b56a0ccec1e06defc317c8b7b169b6e74514d1a6f7bee8c2b32b080ae.bin") Found reference to "HashAlgorithm" (Indicator: "HashAlgorithm"; File: "112d957b56a0ccec1e06defc317c8b7b169b6e74514d1a6f7bee8c2b32b080ae.bin") Found reference to "MD5CryptoServiceProvider" (Indicator: "MD5CryptoServiceProvider"; File: "112d957b56a0ccec1e06defc317c8b7b169b6e74514d1a6f7bee8c2b32b080ae.bin") Found reference to "Rfc2898DeriveBytes" (Indicator: "DeriveBytes"; File: "112d957b56a0ccec1e06defc317c8b7b169b6e74514d1a6f7bee8c2b32b080ae.bin") Found reference to "Rfc2898DeriveBytes" (Indicator: "Rfc2898DeriveBytes"; File: "112d957b56a0ccec1e06defc317c8b7b169b6e74514d1a6f7bee8c2b32b080ae.bin") Found reference to "RijndaelManaged" (Indicator: "Rijndael"; File: "112d957b56a0ccec1e06defc317c8b7b169b6e74514d1a6f7bee8c2b32b080ae.bin") Found reference to "RijndaelManaged" (Indicator: "RijndaelManaged"; File: "112d957b56a0ccec1e06defc317c8b7b169b6e74514d1a6f7bee8c2b32b080ae.bin") Found reference to "SymmetricAlgorithm" (Indicator: "SymmetricAlgorithm"; File: "112d957b56a0ccec1e06defc317c8b7b169b6e74514d1a6f7bee8c2b32b080ae.bin")26:T6ce,Found XOR loop in file "scsisvc.exe" at offset 35777; code bytes = 30d0 Found XOR loop in file "scsisvc.exe" at offset 37674; code bytes = 30d0 Found XOR loop in file "scsisvc.exe" at offset 37750; code bytes = 30d0 Found XOR loop in file "scsisvc.exe" at offset 37774; code bytes = 30d0 Found XOR loop in file "scsisvc.exe" at offset 37850; code bytes = 30d0 Found XOR loop in file "scsisvc.exe" at offset 37986; code bytes = 30d0 Found XOR loop in file "scsisvc.exe" at offset 39352; code bytes = 30d0 Found XOR loop in file "scsisvc.exe" at offset 41003; code bytes = 30d0 Found XOR loop in file "scsisvc.exe" at offset 161140; code bytes = 30d0 Found XOR loop in file "scsisvc.exe" at offset 205618; code bytes = 30d0 Found XOR loop in file "scsisvc.exe" at offset 9493; code bytes = 8030 Found XOR loop in file "scsisvc.exe" at offset 118847; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 35777; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 37674; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 37750; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 37774; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 37850; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 37986; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 39352; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 41003; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 161140; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 205618; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 9493; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 118847; code bytes = 803027:T22d4,"