26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 3b:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T4cb,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Mint.Zard.Generic Sample 153c1bbfce8f… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 153c1bbfce8f…. Malware family: Mint.Zard.Generic. Threat score 100/100. 14/27 AV engines flagged this file. 4 malicious and 16 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/153c1bbfce8fcf4d644a8b7a3843e92e30239d977eb9f4bb21cca7765e48b10d","keywords":["Malicious","Mint.Zard.Generic","malware analysis","sandbox report","threat intelligence","153c1bbfce8fcf4d644a8b7a3843e92e30239d977eb9f4bb21cca7765e48b10d"],"about":{"@type":"SoftwareApplication","name":"153c1bbfce8fcf4d644a8b7a3843e92e30239d977eb9f4bb21cca7765e48b10d.bin","applicationCategory":["peexe","executable"],"identifier":"153c1bbfce8fcf4d644a8b7a3843e92e30239d977eb9f4bb21cca7765e48b10d","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Mint.Zard.Generic","antivirusDetections":{"malicious":14,"total":27},"behavioralIndicators":{"malicious":4,"suspicious":16},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T52e,Contains base64 string in header "like" in header "GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: icanhazip.com" Contains base64 string in header "4664" in header "GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: icanhazip.com" Contains base64 string in header "like" in header "GET /mix/n.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 178.16.54.109" Contains base64 string in header "4664" in header "GET /mix/n.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 178.16.54.109" Contains base64 string in header "like" in header "GET /mix/32119.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 178.16.54.109" Contains base64 string in header "4664" in header "GET /mix/32119.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 178.16.54.109"28:T775," HTTP/1.1 200 OK Date: Fri 27 Feb 2026 13:45:09 GMT Content-Type: text/plain Content-Length: 14 Connection: keep-alive CF-RAY: 9d481efa9ad8fa52-SJC Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Set-Cookie: __cf_bm=.dEYBLURIMDWdErremaLsXOVugif497gINZrdibT9vE-1772199909-1.0.1.1-enkCoCcwFPDsfn6RuYeTT8Xf.uplR8QnOtspQ5frn2Dov7GfvWRK_I8BNdX6dhz_nlmUnXaqiGrjB_ITG3Y3nOGPw2eQLOV0xdXGM.AUO7s; path=/; expires=Fri 27-Feb-26 14:15:09 GMT; domain=.icanhazip.com; HttpOnly Server: cloudflare alt-svc: h3=":443"; ma=86400 with response body ==>36342E3132342E31322E3136320A....... "GET /mix/n.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36 Host: 178.16.54.109" Response ==> HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri 27 Feb 2026 13:45:10 GMT Content-Type: text/plain Content-Length: 7 Last-Modified: Fri 27 Feb 2026 13:35:50 GMT Connection: keep-alive ETag: "69a19db6-7" Accept-Ranges: bytes with response body ==>3132373937360A....... "GET /mix/32119.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36 Host: 178.16.54.109" Response ==> HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri 27 Feb 2026 13:45:10 GMT Content-Type: text/plain Content-Length: 259140 Last-Modified: Thu 26 Feb 2026 00:37:31 GMT Connection: keep-alive ETag: "699f95cb-3f444" Accept-Ranges: bytes with response body ==>6F72640A68616E6E61685F6A62406D736E2E636F6D3A73616E6467726F7573650A68616E6E61685F6A626C407961686F6F2E636F6D3A70617373776F72640A68.......2c:T725,"" (Indicator: "GetDC"; Source: "00000000-00004964.00000000.190124.02F50000.00000004.mdmp, 00000000-00004964.00000001.192044.02F50000.00000004.mdmp, 00000000-00004964.00000002.193964.02F50000.00000004.mdmp, 00000000-00004964.00000003.199467.02F50000.00000004.mdmp") Found reference to API "" (Indicator: "GetDC"; Source: "00000000-00004964.00000000.190124.02F50000.00000004.mdmp, 00000000-00004964.00000001.192044.02F50000.00000004.mdmp, 00000000-00004964.00000002.193964.02F50000.00000004.mdmp, 00000000-00004964.00000003.199467.02F50000.00000004.mdmp") Found reference to API "" (Indicator: "GetWindowDC"; Source: "00000000-00004964.00000000.190124.02F50000.00000004.mdmp, 00000000-00004964.00000001.192044.02F50000.00000004.mdmp, 00000000-00004964.00000002.193964.02F50000.00000004.mdmp, 00000000-00004964.00000003.199467.02F50000.00000004.mdmp") Found reference to API "" (Indicator: "CreateDC"; Source: "00000000-00004964.00000000.190124.02F50000.00000004.mdmp, 00000000-00004964.00000001.192044.02F50000.00000004.mdmp, 00000000-00004964.00000002.193964.02F50000.00000004.mdmp, 00000000-00004964.00000003.199467.02F50000.00000004.mdmp") Found reference to API "" (Indicator: "CreateDC"; Source: "00000000-00004964.00000000.190124.02F50000.00000004.mdmp, 00000000-00004964.00000001.192044.02F50000.00000004.mdmp, 00000000-00004964.00000002.193964.02F50000.00000004.mdmp, 00000000-00004964.00000003.199467.02F50000.00000004.mdmp") Found reference to API "" (Indicator: "CreateCompatibleBitmap"; Source: "00000000-00004964.00000000.190124.02F50000.00000004.mdmp, 00000000-00004964.00000001.192044.02F50000.00000004.mdmp, 00000000-00004964.00000002.193964.02F50000.00000004.mdmp, 00000000-00004964.00000003.199467.02F50000.00000004.mdmp") Found reference to API "" (Indicator: "BitBlt"; Source: "00000000-00004964.00000000.190124.02F50000.00000004.mdmp, 00000000-00004964.00000001.192044.02F50000.00000004.mdmp, 00000000-00004964.00000002.193964.02F50000.00000004.mdmp, 00000000-00004964.00000003.199467.02F50000.00000004.mdmp") Found reference to API "" (Indicator: "CreateCompatibleDC"; Source: "00000000-00004964.00000000.190124.02F50000.00000004.mdmp, 00000000-00004964.00000001.192044.02F50000.00000004.mdmp, 00000000-00004964.00000002.193964.02F50000.00000004.mdmp, 00000000-00004964.00000003.199467.02F50000.00000004.mdmp")37:T7d9,"\" (Indicator: \"CallWindowProc\"; Source: \"00000000-00004964.00000000.190124.02F50000.00000004.mdmp, 00000000-00004964.00000001.192044.02F50000.00000004.mdmp, 00000000-00004964.00000002.193964.02F50000.00000004.mdmp, 00000000-00004964.00000003.199467.02F50000.00000004.mdmp\")","origin":"File/Memory","mitre_attack_id":"T1564.003","relevance":1,"id":"string-320","sources":[{"report_type":"sandbox","report_id":"69a19fc7218bc0fa9500c61f"}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Queries process information","description":"\"\" (Indicator: \"enumchildwindows\"; Source: \"00000000-00004964.00000000.190124.02F50000.00000004.mdmp, 00000000-00004964.00000001.192044.02F50000.00000004.mdmp, 00000000-00004964.00000002.193964.02F50000.00000004.mdmp, 00000000-00004964.00000003.199467.02F50000.00000004.mdmp\")","origin":"File/Memory","mitre_attack_id":"T1055.015","relevance":1,"id":"string-721","sources":[{"report_type":"sandbox","report_id":"69a19fc7218bc0fa9500c61f"}]},{"level":"informative","category":"Environment Awareness","name":"Attempts to call APIs commonly associated with anti-analysis and evasion techniques","description":"\" Microsoft\"","origin":"Static Parser","mitre_attack_id":"T1027.002","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"69a19fc7218bc0fa9500c61f"}]},{"level":"informative","category":"Unusual Characteristics","name":"Reads the windows installation language","description":"\"