26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 37:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T48f,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Mint.Zard.Generic Sample 22a58b0a23c5… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 22a58b0a23c5…. Malware family: Mint.Zard.Generic. Threat score 100/100. 16/27 AV engines flagged this file. 5 malicious and 15 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/22a58b0a23c5dcd4170cd0e9dca8d59ebc074d591a6a539a3660bd1c7811cea9","keywords":["Malicious","Mint.Zard.Generic","malware analysis","sandbox report","threat intelligence","22a58b0a23c5dcd4170cd0e9dca8d59ebc074d591a6a539a3660bd1c7811cea9"],"about":{"@type":"SoftwareApplication","name":"file.exe","applicationCategory":["peexe","executable"],"identifier":"22a58b0a23c5dcd4170cd0e9dca8d59ebc074d591a6a539a3660bd1c7811cea9","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Mint.Zard.Generic","antivirusDetections":{"malicious":16,"total":27},"behavioralIndicators":{"malicious":5,"suspicious":15},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T6ee,Contains base64 string in header "like" in header "GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: icanhazip.com" Contains base64 string in header "4664" in header "GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: icanhazip.com" Contains base64 string in header "/4/n" in header "GET /4/n.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 130.12.180.190" Contains base64 string in header "like" in header "GET /4/n.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 130.12.180.190" Contains base64 string in header "4664" in header "GET /4/n.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 130.12.180.190" Contains base64 string in header "/4/61415" in header "GET /4/61415.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 130.12.180.190" Contains base64 string in header "like" in header "GET /4/61415.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 130.12.180.190" Contains base64 string in header "4664" in header "GET /4/61415.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 130.12.180.190"28:T775," HTTP/1.1 200 OK Date: Fri 05 Jun 2026 19:17:23 GMT Content-Type: text/plain Content-Length: 14 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET set-cookie: __cf_bm=5ALTxxafbn74JcWqj08achCj7qiMx7dKvoHy8vmLEfE-1780687043.885089-1.0.1.1-PfYSWSA6S2GWLoecL2p5NxEpRJ0m97NWVHC1ijx7rOD4bzWL_IHySvzLNtyArMbNN6EWfJzjUpBff8NTK5_QVPPLWdYLm5wyt1zjTU.ObB5PwG8XYyzhsKzZ542bM7aC; HttpOnly; Path=/; Domain=icanhazip.com; Expires=Fri 05 Jun 2026 19:47:23 GMT Server: cloudflare CF-RAY: a07184684e7f8f74-SJC alt-svc: h3=":443"; ma=86400 with response body ==>36342E3132342E31322E3136320A....... "GET /4/n.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36 Host: 130.12.180.190" Response ==> HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri 05 Jun 2026 19:17:24 GMT Content-Type: text/plain Content-Length: 6 Last-Modified: Mon 20 Apr 2026 02:00:15 GMT Connection: keep-alive ETag: "69e588af-6" Accept-Ranges: bytes with response body ==>36333532310A....... "GET /4/61415.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36 Host: 130.12.180.190" Response ==> HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri 05 Jun 2026 19:17:24 GMT Content-Type: text/plain Content-Length: 258137 Last-Modified: Sun 19 Apr 2026 17:09:06 GMT Connection: keep-alive ETag: "69e50c32-3f059" Accept-Ranges: bytes with response body ==>407765622E64653A686F63687A656974313230380A6D61696C746F696E65633330303140696E65632E766E3A5851434A43594142435442500A61616C6C656E30.......2c:T725," Microsoft\"","origin":"Static Parser","mitre_attack_id":"T1027.002","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"6a2320ae3b4032a7b801a3f5"}]},{"level":"informative","category":"Unusual Characteristics","name":"Reads the windows installation language","description":"\"