26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 34:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T4b1,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Win/malicious_confidence_60% Sample 127ec0c18e91… — Score 45/100 — Hybrid Analysis","description":"Malicious verdict for sample 127ec0c18e91…. Malware family: Win/malicious_confidence_60%. Threat score 45/100. 8/27 AV engines flagged this file. 0 malicious and 8 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/127ec0c18e91269d2fd3490a1a52d150ef2e01151c0a057182bf8df82236191d","keywords":["Malicious","Win/malicious_confidence_60%","malware analysis","sandbox report","threat intelligence","127ec0c18e91269d2fd3490a1a52d150ef2e01151c0a057182bf8df82236191d"],"about":{"@type":"SoftwareApplication","name":"a.exe","applicationCategory":["peexe","executable"],"identifier":"127ec0c18e91269d2fd3490a1a52d150ef2e01151c0a057182bf8df82236191d","additionalType":"Malicious sample"},"threatScore":45,"malwareFamily":"Win/malicious_confidence_60%","antivirusDetections":{"malicious":8,"total":27},"behavioralIndicators":{"malicious":0,"suspicious":8},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T646,Assembly shows XOR instruction xor al 95h in Stream UID: 54663-279-00451F54 Assembly shows XOR instruction xor byte ptr [eax+00h] al in Stream UID: 54663-279-00451F54 Assembly shows XOR instruction xor dword ptr [ecx] eax in Stream UID: 54663-279-00451F54 Assembly shows XOR instruction xor dword ptr [ebx+6Ch] eax in Stream UID: 54663-279-00451F54 Assembly shows XOR instruction xor dword ptr [eax-57FFBAE1h] edx in Stream UID: 54663-279-00451F54 Assembly shows XOR instruction xor eax dword ptr [eax+00h] in Stream UID: 54663-849-00428B44 Assembly shows XOR instruction xor byte ptr [eax+00h] al in Stream UID: 54663-849-00428B44 Assembly shows XOR instruction xor ch byte ptr [esi] in Stream UID: 54663-849-00428B44 Assembly shows XOR instruction xor ah byte ptr [edi+05h] in Stream UID: 54663-1248-00401368 Assembly shows XOR instruction xor ch byte ptr [eax+05h] in Stream UID: 54663-1289-004012C4 Assembly shows XOR instruction xor ch byte ptr [ebx+05h] in Stream UID: 54663-1375-00406008 Assembly shows XOR instruction xor eax edx in Stream UID: 54663-1881-00421DE4 Assembly shows XOR instruction xor al 01h in Stream UID: 54663-2040-0042BF18 Assembly shows XOR instruction xor al 01h in Stream UID: 54663-2043-0042BF74 Assembly shows XOR instruction xor byte ptr [ebp+05h] bh in Stream UID: 54663-2435-004062C0 Assembly shows XOR instruction xor byte ptr [eax+05h] bh in Stream UID: 54663-2647-00406550 Assembly shows XOR instruction xor eax C37BCAAEh in Stream UID: 54663-2668-00402E13 Assembly shows XOR instruction xor al 6Eh in Stream UID: 54663-4118-00405E9828:T71e,Found XOR loop in file "sample.bin" at offset 115712; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 347677; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 351247; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 351901; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 353713; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 354893; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 366325; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 371411; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 17701; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 363495; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 168595; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 170969; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 300680; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 300713; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 312010; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 312404; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 349616; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 351222; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 352598; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 354574; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 355792; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 360640; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 365400; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 370168; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 371372; code bytes = 803029:T4f8," BoB / BobSoft\"","origin":"Static Parser","mitre_attack_id":"T1027.002","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"6a211f61f469e7e12303326c"}]},{"level":"informative","category":"Unusual Characteristics","name":"Reads the windows installation language","description":"\"