26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 32:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T4bf,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Cerbu.Generic Sample 2eac96249e00… — Score 89/100 — Hybrid Analysis","description":"Malicious verdict for sample 2eac96249e00…. Malware family: Cerbu.Generic. Threat score 89/100. 8/27 AV engines flagged this file. 4 malicious and 14 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/2eac96249e00012e874d427c378cafae63f8ad2aac861121818ccfb4ccb19e90","keywords":["Malicious","Cerbu.Generic","malware analysis","sandbox report","threat intelligence","2eac96249e00012e874d427c378cafae63f8ad2aac861121818ccfb4ccb19e90"],"about":{"@type":"SoftwareApplication","name":"2eac96249e00012e874d427c378cafae63f8ad2aac861121818ccfb4ccb19e90.bin","applicationCategory":["peexe","64bits","executable"],"identifier":"2eac96249e00012e874d427c378cafae63f8ad2aac861121818ccfb4ccb19e90","additionalType":"Malicious sample"},"threatScore":89,"malwareFamily":"Cerbu.Generic","antivirusDetections":{"malicious":8,"total":27},"behavioralIndicators":{"malicious":4,"suspicious":14},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T966,Assembly shows XOR instruction xor rcx rsp in Stream UID: 37488-3220-0000000140008B08 Assembly shows XOR instruction xor ecx esp in Stream UID: 37488-3220-0000000140008B08 Assembly shows XOR instruction xor rcx rsp in Stream UID: 37488-3222-0000000140008C0C Assembly shows XOR instruction xor ecx esp in Stream UID: 37488-3222-0000000140008C0C Assembly shows XOR instruction xor rax rsp in Stream UID: 37488-3254-000000014000AC0E Assembly shows XOR instruction xor eax esp in Stream UID: 37488-3254-000000014000AC0E Assembly shows XOR instruction xor rcx rsp in Stream UID: 37488-3254-000000014000AC0E Assembly shows XOR instruction xor ecx esp in Stream UID: 37488-3254-000000014000AC0E Assembly shows XOR instruction xor rax rsp in Stream UID: 37488-3398-0000000140015E1A Assembly shows XOR instruction xor eax esp in Stream UID: 37488-3398-0000000140015E1A Assembly shows XOR instruction xor rcx rsp in Stream UID: 37488-3398-0000000140015E1A Assembly shows XOR instruction xor ecx esp in Stream UID: 37488-3398-0000000140015E1A Assembly shows XOR instruction xor rax rsp in Stream UID: 37488-3410-00000001400162AB Assembly shows XOR instruction xor eax esp in Stream UID: 37488-3410-00000001400162AB Assembly shows XOR instruction xor rcx rsp in Stream UID: 37488-3410-00000001400162AB Assembly shows XOR instruction xor ecx esp in Stream UID: 37488-3410-00000001400162AB Assembly shows XOR instruction xor edi dword ptr [rcx] in Stream UID: 37488-3549-000000014001DDFD Assembly shows XOR instruction xor dword ptr [rcx] edi in Stream UID: 37488-3549-000000014001DDFD Assembly shows XOR instruction xor qword ptr [rbp-10h] rax in Stream UID: 37488-8538-0000000140007C19 Assembly shows XOR instruction xor dword ptr [rbp-10h] eax in Stream UID: 37488-8538-0000000140007C19 Assembly shows XOR instruction xor rax qword ptr [rbp+18h] in Stream UID: 37488-8538-0000000140007C19 Assembly shows XOR instruction xor eax dword ptr [rbp+18h] in Stream UID: 37488-8538-0000000140007C19 Assembly shows XOR instruction xor rax qword ptr [rbp-10h] in Stream UID: 37488-8538-0000000140007C19 Assembly shows XOR instruction xor eax dword ptr [rbp-10h] in Stream UID: 37488-8538-0000000140007C19 Assembly shows XOR instruction xor rax rcx in Stream UID: 37488-8538-0000000140007C19 Assembly shows XOR instruction xor eax ecx in Stream UID: 37488-8538-0000000140007C1928:Tfa8,Found XOR loop in file "MsEdgeUpdate.exe.bin" at offset 171479; code bytes = 30d0 Found XOR loop in file "MsEdgeUpdate.exe.bin" at offset 175067; code bytes = 30d0 Found XOR loop in file "MsEdgeUpdate.exe.bin" at offset 359992; code bytes = 30d0 Found XOR loop in file "MsEdgeUpdate.exe.bin" at offset 680669; code bytes = 30d0 Found XOR loop in file "MsEdgeUpdate.exe.bin" at offset 851741; code bytes = 30d0 Found XOR loop in file "MsEdgeUpdate.exe.bin" at offset 1129990; code bytes = 30d0 Found XOR loop in file "MsEdgeUpdate.exe.bin" at offset 1383634; code bytes = 30d0 Found XOR loop in file "MsEdgeUpdate.exe.bin" at offset 28779; code bytes = 33c1 Found XOR loop in file "MsEdgeUpdate.exe.bin" at offset 598771; code bytes = 33c1 Found XOR loop in file "MsEdgeUpdate.exe.bin" at offset 652342; code bytes = 33c1 Found XOR loop in file "MsEdgeUpdate.exe.bin" at offset 920601; code bytes = 33c1 Found XOR loop in file "MsEdgeUpdate.exe.bin" at offset 1007577; code bytes = 33c1 Found XOR loop in file "MsEdgeUpdate.exe.bin" at offset 1148233; code bytes = 33c1 Found XOR loop in file "MsEdgeUpdate.exe.bin" at offset 1251307; code bytes = 33c1 Found XOR loop in file "MsEdgeUpdate.exe.bin" at offset 6075; code bytes = 30040e Found XOR loop in file "MsEdgeUpdate.exe.bin" at offset 598778; code bytes = 8030 Found XOR loop in file "MsEdgeUpdate.exe.bin" at offset 1062417; code bytes = 8030 Found XOR loop in file "MsEdgeUpdate.exe" at offset 171479; code bytes = 30d0 Found XOR loop in file "MsEdgeUpdate.exe" at offset 175067; code bytes = 30d0 Found XOR loop in file "MsEdgeUpdate.exe" at offset 359992; code bytes = 30d0 Found XOR loop in file "MsEdgeUpdate.exe" at offset 680669; code bytes = 30d0 Found XOR loop in file "MsEdgeUpdate.exe" at offset 851741; code bytes = 30d0 Found XOR loop in file "MsEdgeUpdate.exe" at offset 1129990; code bytes = 30d0 Found XOR loop in file "MsEdgeUpdate.exe" at offset 1383634; code bytes = 30d0 Found XOR loop in file "MsEdgeUpdate.exe" at offset 28779; code bytes = 33c1 Found XOR loop in file "MsEdgeUpdate.exe" at offset 598771; code bytes = 33c1 Found XOR loop in file "MsEdgeUpdate.exe" at offset 652342; code bytes = 33c1 Found XOR loop in file "MsEdgeUpdate.exe" at offset 920601; code bytes = 33c1 Found XOR loop in file "MsEdgeUpdate.exe" at offset 1007577; code bytes = 33c1 Found XOR loop in file "MsEdgeUpdate.exe" at offset 1148233; code bytes = 33c1 Found XOR loop in file "MsEdgeUpdate.exe" at offset 1251307; code bytes = 33c1 Found XOR loop in file "MsEdgeUpdate.exe" at offset 6075; code bytes = 30040e Found XOR loop in file "MsEdgeUpdate.exe" at offset 598778; code bytes = 8030 Found XOR loop in file "MsEdgeUpdate.exe" at offset 1062417; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 171479; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 175067; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 359992; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 680669; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 851741; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1129990; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1383634; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 28779; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 598771; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 652342; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 920601; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1007577; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1148233; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1251307; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 6075; code bytes = 30040e Found XOR loop in file "sample.bin" at offset 598778; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1062417; code bytes = 803029:T1562,"