34:"SampleDetailWrapper" 35:I[7638,["$1","$2","$3","$4","$5","$8","$9","$a","$b"],"$34"] 3a:I[99539,["$1","$2","$3","$4","$5"],"IconMark"] 33:T4cc,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Mint.Zard.Generic Sample 3c56d23fc668… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 3c56d23fc668…. Malware family: Mint.Zard.Generic. Threat score 100/100. 5/28 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/3c56d23fc668ebfc63df6d2f10ce9ba8caf9d20ac5c9b2e234027d4451f29ab0","keywords":["Malicious","Mint.Zard.Generic","malware analysis","sandbox report","threat intelligence","3c56d23fc668ebfc63df6d2f10ce9ba8caf9d20ac5c9b2e234027d4451f29ab0"],"about":{"@type":"SoftwareApplication","name":"3c56d23fc668ebfc63df6d2f10ce9ba8caf9d20ac5c9b2e234027d4451f29ab0","applicationCategory":["peexe","64bits","executable"],"identifier":"3c56d23fc668ebfc63df6d2f10ce9ba8caf9d20ac5c9b2e234027d4451f29ab0","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Mint.Zard.Generic","antivirusDetections":{"malicious":5,"total":28},"behavioralIndicators":{"malicious":0,"suspicious":2},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}36:T1ed2,Heuristic match: "rust_backtrace/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\wtf8\mod.rs", Heuristic match: "t\toolchains\stable-x86_64-pc-windows-msvc\lib/rustlib/src/rust\library\std\src\thread\local.rs", Heuristic match: "fffoffglffgrffhgffflfffjffhrffhrffglfffjffhofffjffhjffhnfffmffgpffgjffgsffhiffgsfffkffifffhlffgpfffsfffiffx\h.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\slice\index.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\str\mod.rs", Heuristic match: "hash table capacity overflow/rust/deps\hashbrown-0.17.1\src\raw.rs", Heuristic match: "r\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\read.rs", Heuristic match: "dibbdpbbepbbcebbcbbbdnbbcqbbclbbbdbbcfbbcpbbeqbbbmbbcebbclbbepbbecbbbnbbcmbbdkbbbcbbclbbehbbedbbdpbbdobbdlbbddbbbmbbbfbbegbbbobbcibbdnbbdfbbembbdpbbbkbbbmbbcebbdfbb27789:82/9//3/=8008.=.1/4:9:5;747=8507.=...;...9...1...0...;...8...2...2...:...9...0...5...=", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\panic_abort\src\lib.rs", Heuristic match: "t\toolchains\stable-x86_64-pc-windows-msvc\lib/rustlib/src/rust\library\core\src\str\pattern.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sys\io\error\windows.rs", Heuristic match: "a formatting trait implementation returned an error when the underlying stream did not/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\io\write.rs", Heuristic match: "capacity overflow/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\str.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\io\read.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\thread\id.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\unicode\unicode_data.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\slice\memchr.rs", Heuristic match: "/rust/deps\rustc-demangle-0.1.28\src\legacy.rs", Heuristic match: "t\toolchains\stable-x86_64-pc-windows-msvc\lib/rustlib/src/rust\library\alloc\src\collections\btree\map\entry.rs", Heuristic match: "r\registry\src\index.crates.io-1949cf8c6b5b557f\aes-gcm-0.10.3\src\lib.rs", Heuristic match: "x\b.rs", Heuristic match: "r\registry\src\index.crates.io-1949cf8c6b5b557f\block-padding-0.3.3\src\lib.rs", Heuristic match: "r\registry\src\index.crates.io-1949cf8c6b5b557f\poly1305-0.8.0\src\backend\avx2.rs", Heuristic match: "t\toolchains\stable-x86_64-pc-windows-msvc\lib/rustlib/src/rust\library\alloc\src\collections\btree\navigate.rs", Heuristic match: "r\registry\src\index.crates.io-1949cf8c6b5b557f\ctr-0.9.2\src\flavors\ctr32.rs", Heuristic match: "sizelimitexhaustederrorparseinterrorkind/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\ops\function.rs", Heuristic match: "x\q.rs", Heuristic match: "r\k\c.rs", Heuristic match: "internal error: entered unreachable code/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sys\pal\windows\mod.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\raw_vec\mod.rs", Heuristic match: "cunsafe extern -fn() -> + : punycode{}.llvm./rust/deps\rustc-demangle-0.1.28\src\lib.rs", Pattern match: "http://schemas.microsoft.com/smi/2005/windowssettings", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sys\stdio\windows.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\io\stdio.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\fmt\mod.rs", Heuristic match: "t\toolchains\stable-x86_64-pc-windows-msvc\lib/rustlib/src/rust\library\core\src\slice\iter.rs", Heuristic match: "src\b64.rs", Heuristic match: "{invalid syntax}{recursion limit reached}?`fmt::error`s should be impossible without a `fmt::formatter`/rust/deps\rustc-demangle-0.1.28\src\v0.rs", Heuristic match: "v\k\a.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sync\once.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\wtf8.rs", Heuristic match: "trelmtjrfhrqqqlrfhmnhprhgmrohjlniioorlrohhhqrefmrniotjgrtioithsrlitofroglrgkiljkpfresmqhhgijlekfhghgherpfqsgggjljikopnejksmpqnmosjfttlfennifeeeqeehjeegneefeeefoeefqeeeseehmeegeeefseefreeheeeekeefoeehqeehheehkeegqeehheefpeefreehleegkeefreehoeefoeehoeeffeefr", Heuristic match: ">=/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\panicking.rs", Heuristic match: "t\toolchains\stable-x86_64-pc-windows-msvc\lib/rustlib/src/rust\library\core\src\slice\sort\stable\quicksort.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sys\pal\windows\time.rs", Heuristic match: "src\mindb.rs", Heuristic match: "r\registry\src\index.crates.io-1949cf8c6b5b557f\sha2-0.10.9\src\core_api.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\..\..\backtrace\src\symbolize\mod.rs", Heuristic match: "r\registry\src\index.crates.io-1949cf8c6b5b557f\generic-array-0.14.7\src\lib.rs", Heuristic match: "assertion failed: self.is_char_boundary(new_len)/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\ffi\os_str.rs", Heuristic match: "src\sdec.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\rt.rs", Heuristic match: "overflow in duration::new/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\time.rs", Heuristic match: "too many active read locks on rwlock/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sys\sync\rwlock\futex.rs", Heuristic match: "r\registry\src\index.crates.io-1949cf8c6b5b557f\cipher-0.4.4\src\stream.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sys\paths\windows.rs", Heuristic match: "[r\k\u.rs", Heuristic match: "once instance has previously been poisoned/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\path.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\panicking.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\fmt.rs", Heuristic match: "r\registry\src\index.crates.io-1949cf8c6b5b557f\cipher-0.4.4\src\block.rs", Heuristic match: "x\d.rs", Heuristic match: "x\o.rs", Heuristic match: "'&'1()(0%2(&*+((%(13++2,%%-+-(4(011(&2)%)22%%**2%)*'+/%+&-/).-%,+.-440.)/)0'04).0+3-&%+4-+.&')1&2*1(2(/43)(0)((1-0&2%4-,,%/,,(&.0'3.0(*+)11.**'./1'24/41-,,1././02(%0&4(('%)002&('3%%*./0*(214/,')4(41,(1(/(0.,',3403%223./2*+&&3(-2-%'%&3)0,'3.-*/.33,%3,%)%-14", Heuristic match: "t\toolchains\stable-x86_64-pc-windows-msvc\lib/rustlib/src/rust\library\core\src\slice\mod.rs", Heuristic match: "r\registry\src\index.crates.io-1949cf8c6b5b557f\cipher-0.4.4\src\stream_wrapper.rs", Heuristic match: "t\toolchains\stable-x86_64-pc-windows-msvc\lib/rustlib/src/rust\library\alloc\src\collections\btree\node.rs", Heuristic match: "r\registry\src\index.crates.io-1949cf8c6b5b557f\block-buffer-0.10.4\src\lib.rs", Heuristic match: "*$).+#/*'#'%-')-/0'/1,.-2-0(2#(2,12-/#/./%),./$+#1.#0&/,+.*(#*%11()100()))1*%+%&(0$$-//)-**'#/(%*202-'(,(1*$1-121%.+.2./#,2&2.22&+)+&0/+1(2',)$1'0)+02*$#-20&1/()(#.###+##%/##$+##%2###%##&.##(###%)##$*###-###0##&/##%%##%$###&##%)##(###%%##%&##%/##$1##$0##$&"37:T1007,Found reference string "RUST_BACKTRACE/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\wtf8\mod.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\slice\index.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\str\mod.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\panic_abort\src\lib.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "note: Some details are omitted, run with `RUST_BACKTRACE=full` for a verbose backtrace. \" (Indicator: "rust_backtrace"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sys\io\error\windows.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "a formatting trait implementation returned an error when the underlying stream did not/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\io\write.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "capacity overflow/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\str.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\io\read.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\thread\id.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\unicode\unicode_data.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\slice\memchr.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "SizeLimitExhaustedErrorParseIntErrorkind/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\ops\function.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "internal error: entered unreachable code/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sys\pal\windows\mod.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\raw_vec\mod.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sys\stdio\windows.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\io\stdio.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\fmt\mod.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sync\once.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\wtf8.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string ">=/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\panicking.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sys\pal\windows\time.rs" (Indicator: "/rustc/"; Source: "sample.bin")38:T1624,Found reference to API (Indicator: "NtWriteFile"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemTimePreciseAsFileTime"; Source: "sample.bin"), Found reference to API (Indicator: "DeleteFileW"; Source: "sample.bin"), Found reference to API (Indicator: "WinHttpSetOption"; Source: "sample.bin"), Found reference to API (Indicator: "WaitForSingleObjectEx"; Source: "sample.bin"), Found reference to API (Indicator: "GetEnvironmentVariableW"; Source: "sample.bin"), Found reference to API (Indicator: "ExitProcess"; Source: "sample.bin"), Found reference to API (Indicator: "WinHttpSetTimeouts"; Source: "sample.bin"), Found reference to API (Indicator: "RtlNtStatusToDosError"; Source: "sample.bin"), Found reference to API (Indicator: "GetConsoleOutputCP"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentThreadId"; Source: "sample.bin"), Found reference to API (Indicator: "LoadLibraryA"; Source: "sample.bin"), Found reference to API (Indicator: "GetModuleFileNameW"; Source: "sample.bin"), Found reference to API (Indicator: "IsDebuggerPresent"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentProcess"; Source: "sample.bin"), Found reference to API (Indicator: "WinHttpOpenRequest"; Source: "sample.bin"), Found reference to API (Indicator: "SetThreadDescription"; Source: "sample.bin"), Found reference to API (Indicator: "WinHttpCloseHandle"; Source: "sample.bin"), Found reference to API (Indicator: "GetModuleHandleA"; Source: "sample.bin"), Found reference to API (Indicator: "GetModuleHandleW"; Source: "sample.bin"), Found reference to API (Indicator: "QueryPerformanceCounter"; Source: "sample.bin"), Found reference to API (Indicator: "WinHttpSendRequest"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentProcessId"; Source: "sample.bin"), Found reference to API (Indicator: "FormatMessageW"; Source: "sample.bin"), Found reference to API (Indicator: "HeapAlloc"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentDirectoryW"; Source: "sample.bin"), Found reference to API (Indicator: "RtlVirtualUnwind"; Source: "sample.bin"), Found reference to API (Indicator: "GetFullPathNameW"; Source: "sample.bin"), Found reference to API (Indicator: "WinHttpConnect"; Source: "sample.bin"), Found reference to API (Indicator: "CopyFileExW"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemTimeAsFileTime"; Source: "sample.bin"), Found reference to API (Indicator: "HeapFree"; Source: "sample.bin"), Found reference to API (Indicator: "AddVectoredExceptionHandler"; Source: "sample.bin"), Found reference to API (Indicator: "GetStdHandle"; Source: "sample.bin"), Found reference to API (Indicator: "UnhandledExceptionFilter"; Source: "sample.bin"), Found reference to API (Indicator: "WinHttpOpen"; Source: "sample.bin"), Found reference to API (Indicator: "InitializeSListHead"; Source: "sample.bin"), Found reference to API (Indicator: "SetFileInformationByHandle"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentThread"; Source: "sample.bin"), Found reference to API (Indicator: "GetConsoleMode"; Source: "sample.bin"), Found reference to API (Indicator: "CreateWaitableTimerExW"; Source: "sample.bin"), Found reference to API (Indicator: "GetProcessHeap"; Source: "sample.bin"), Found reference to API (Indicator: "GetProcAddress"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileInformationByHandle"; Source: "sample.bin"), Found reference to API (Indicator: "FindFirstFileExW"; Source: "sample.bin"), Found reference to API (Indicator: "CreateMutexA"; Source: "sample.bin"), Found reference to API (Indicator: "CreateFileW"; Source: "sample.bin"), Found reference to API (Indicator: "ReleaseMutex"; Source: "sample.bin"), Found reference to API (Indicator: "Sleep"; Source: "sample.bin"), Found reference to API (Indicator: "RtlCaptureContext"; Source: "sample.bin"), Found reference to API (Indicator: "SetFileTime"; Source: "sample.bin"), Found reference to API (Indicator: "GetTempPathW"; Source: "sample.bin"), Found reference to API (Indicator: "QueryPerformanceFrequency"; Source: "sample.bin"), Found reference to API (Indicator: "WideCharToMultiByte"; Source: "sample.bin"), Found reference to API (Indicator: "SetUnhandledExceptionFilter"; Source: "sample.bin"), Found reference to API (Indicator: "WinHttpReceiveResponse"; Source: "sample.bin"), Found reference to API (Indicator: "FindClose"; Source: "sample.bin"), Found reference to API (Indicator: "FindNextFileW"; Source: "sample.bin"), Found reference to API (Indicator: "IsProcessorFeaturePresent"; Source: "sample.bin"), Found reference to API (Indicator: "WriteConsoleW"; Source: "sample.bin"), Found reference to API (Indicator: "SetWaitableTimer"; Source: "sample.bin"), Found reference to API (Indicator: "GetLastError"; Source: "sample.bin"), Found reference to API (Indicator: "NtReadFile"; Source: "sample.bin"), Found reference to API (Indicator: "lstrlenW"; Source: "sample.bin"), Found reference to API (Indicator: "HeapReAlloc"; Source: "sample.bin"), Found reference to API (Indicator: "MultiByteToWideChar"; Source: "sample.bin"), Found reference to API (Indicator: "SetThreadStackGuarantee"; Source: "sample.bin"), Found reference to API (Indicator: "SetLastError"; Source: "sample.bin"), Found reference to API (Indicator: "WaitForSingleObject"; Source: "sample.bin"), Found reference to API (Indicator: "RtlLookupFunctionEntry"; Source: "sample.bin"), Found reference to API (Indicator: "CloseHandle"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileInformationByHandleEx"; Source: "sample.bin")39:T418,"8;6?337:37199>?837094>431>?08;9=<69;73116?<391359><729048:<:146>017;327=913=0058005600260045001>0017000<000?00130040000<002100160055002400420012002:003;00210056002<000<005;0025002<005:002?0015005;0007000?0054001>0051000800270035004200560001000<0004004500120034002=004;002?0015002:0007002500170031004;004?002:004<0018000=003>002<004600550038001300390022000<000?0039003:004<001?000900380023001:0025002>001?0002001<0034002200410018000:004?0047002900hnqbemilgggdolpkefplplibbhpmpmmbiqigjgjjejfjghggjqjfeeimplidmldqbonkjocklegdqjeqhjpmjnlicemilkenigkklojchmkbmbmiijpdjjconpnigjqkjcchpbgnbjfhenqidnioldfggcbbbbeqbbedbbdlbbcibbcobbeqbbedbbdpbbbkbbbebbcobbehbbdbbbembbfjbbbobbfkbbdqbbembbekbbecbbbobbdobbelbbejbbdfbbcpbbcmbbecbbeibbbhbbcpbbflbbddbbfkbbbhbbfbbbcbbbdbbbcqbbdnbbembbcpbbbhbbblbbebbbfdbbdhbbccbbejbbdobbdgbbfibbdbbbdgbbfibbcbbbflbbdlbbeibbbpbbekbbdhbbegbbdbbbddbbfmbbbhbbfjbbdgbbcfbbdobbfibbfjbbbpbbbdbb801;<506;;8/