24:I[10321,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/3h6zdc-it88if.js","/_next/static/chunks/2vw2j18d9u3gs.js","/_next/static/chunks/3l_wb6il5gi_h.js"],"ReportDetailWrapper"] 2d:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T524,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Generic.Ransom.Mespinoza — Falcon Sandbox Report — Score 97/100 — Sample 4dc802894c45…","description":"Malicious verdict for sandbox report 5ff43cedac12…. Malware family: Generic.Ransom.Mespinoza. Threat score 97/100. 5 malicious and 7 suspicious behavioral indicators across 16 signatures. Detonated in Windows 7 32 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT\u0026CK mappings.","url":"/sample/4dc802894c45ec4d119d002a7569be6c99a9bba732d0057364da9350f9d3659b/5ff43cedac12f719391b247a","keywords":["Malicious","Generic.Ransom.Mespinoza","sandbox report","malware analysis","MITRE ATT\u0026CK","4dc802894c45ec4d119d002a7569be6c99a9bba732d0057364da9350f9d3659b"],"about":{"@type":"SoftwareApplication","name":"svchost.exe","applicationCategory":"PE32 executable (console) Intel 80386, for MS Windows","identifier":"4dc802894c45ec4d119d002a7569be6c99a9bba732d0057364da9350f9d3659b","additionalType":"Malicious sample"},"threatScore":97,"malwareFamily":"Generic.Ransom.Mespinoza","sandboxEnvironment":"Windows 7 32 bit","behavioralIndicators":{"malicious":5,"suspicious":7,"totalSignatures":16},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T570,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26:T42e,Pattern match: "http://wqmfzni2nvbbpk25.onion/" Heuristic match: "elainaroneal@onionmail.org" Heuristic match: "hayleycandler@onionmail.org" Heuristic match: "victoriasadlier@protonmail.com" Pattern match: "qAG5.OC/3/:='Z[mDY" Pattern match: "2SKh.hQ/~O;F+.O2qo2hEK097$[Vuph*]SBEJ0" Pattern match: "R.fB/p9R" Pattern match: "j.pSJv/`;dS" Pattern match: "B.dI/IMZ" Heuristic match: "W?Pcs)v<,_s*9EaIx /3c-R_nQ&x`iA.lj^j);OapILJ/6[lJnRA+Y^q1Lpv0GW#9~Ph2L-d#`.h'pv0GW#9~Ph2L-d#`.h'pv0GW#9~Ph2L-d#`.h'