26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 53:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T4ce,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Win/malicious_confidence_60% Sample 5665f5570d00… — Score 83/100 — Hybrid Analysis","description":"Malicious verdict for sample 5665f5570d00…. Malware family: Win/malicious_confidence_60%. Threat score 83/100. 5/27 AV engines flagged this file. 2 malicious and 12 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/5665f5570d006c5d08e9dfac4dc1eef5960ea07c403ffca33e88da564eaa0c83","keywords":["Malicious","Win/malicious_confidence_60%","malware analysis","sandbox report","threat intelligence","5665f5570d006c5d08e9dfac4dc1eef5960ea07c403ffca33e88da564eaa0c83"],"about":{"@type":"SoftwareApplication","name":"z1Documentosfiscais.exe","applicationCategory":["peexe","64bits","executable"],"identifier":"5665f5570d006c5d08e9dfac4dc1eef5960ea07c403ffca33e88da564eaa0c83","additionalType":"Malicious sample"},"threatScore":83,"malwareFamily":"Win/malicious_confidence_60%","antivirusDetections":{"malicious":5,"total":27},"behavioralIndicators":{"malicious":2,"suspicious":12},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T8a8,Found reference to API "VirtualFree" (Indicator: "VirtualFree"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000000.135964.06800000.00000040.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp, 00000000-00005140.00000001.136045.06690000.00000040.mdmp, 00000000-00005140.00000001.136045.06800000.00000040.mdmp") Found reference to API "VirtualAlloc" (Indicator: "VirtualAlloc"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000000.135964.06800000.00000040.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp, 00000000-00005140.00000001.136045.06690000.00000040.mdmp, 00000000-00005140.00000001.136045.06800000.00000040.mdmp") Found reference to API "WriteProcessMemory" (Indicator: "WriteProcessMemory"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000000.135964.06800000.00000040.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp, 00000000-00005140.00000001.136045.06690000.00000040.mdmp, 00000000-00005140.00000001.136045.06800000.00000040.mdmp") Found reference to API "VirtualAllocEx" (Indicator: "VirtualAlloc"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000000.135964.06800000.00000040.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp, 00000000-00005140.00000001.136045.06690000.00000040.mdmp, 00000000-00005140.00000001.136045.06800000.00000040.mdmp") Found reference to API "VirtualAllocEx" (Indicator: "VirtualAllocEx"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000000.135964.06800000.00000040.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp, 00000000-00005140.00000001.136045.06690000.00000040.mdmp, 00000000-00005140.00000001.136045.06800000.00000040.mdmp") Found reference to API "CreateThread" (Indicator: "CreateThread"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000000.135964.06800000.00000040.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp, 00000000-00005140.00000001.136045.06690000.00000040.mdmp, 00000000-00005140.00000001.136045.06800000.00000040.mdmp")28:T45b,Found reference to API "ResumeThread" (Indicator: "ResumeThread"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000000.135964.06800000.00000040.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp, 00000000-00005140.00000001.136045.06690000.00000040.mdmp, 00000000-00005140.00000001.136045.06800000.00000040.mdmp") Found reference to API "GetThreadContext" (Indicator: "GetThreadContext"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000000.135964.06800000.00000040.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp, 00000000-00005140.00000001.136045.06690000.00000040.mdmp, 00000000-00005140.00000001.136045.06800000.00000040.mdmp") Found reference to API "SetThreadContext" (Indicator: "SetThreadContext"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000000.135964.06800000.00000040.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp, 00000000-00005140.00000001.136045.06690000.00000040.mdmp, 00000000-00005140.00000001.136045.06800000.00000040.mdmp")29:T944,Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTimeAsFileTime"; File: "5665f5570d006c5d08e9dfac4dc1eef5960ea07c403ffca33e88da564eaa0c83.bin") Found reference to API "QueryPerformanceCounter" (Indicator: "QueryPerformanceCounter"; File: "5665f5570d006c5d08e9dfac4dc1eef5960ea07c403ffca33e88da564eaa0c83.bin") Found reference to API "QueryPerformanceCounter" (Indicator: "QueryPerformanceCounter"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000000.135964.06800000.00000040.mdmp, 00000000-00005140.00000000.135964.65812000.00000002.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp, 00000000-00005140.00000001.136045.06690000.00000040.mdmp, 00000000-00005140.00000001.136045.06800000.00000040.mdmp") Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTimeAsFileTime"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000000.135964.06800000.00000040.mdmp, 00000000-00005140.00000000.135964.65812000.00000002.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp, 00000000-00005140.00000001.136045.06690000.00000040.mdmp, 00000000-00005140.00000001.136045.06800000.00000040.mdmp") Found reference to API "WaitForSingleObject" (Indicator: "WaitForSingleObject"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000000.135964.06800000.00000040.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp, 00000000-00005140.00000001.136045.06690000.00000040.mdmp, 00000000-00005140.00000001.136045.06800000.00000040.mdmp") Found reference to API "SetWaitableTimer" (Indicator: "SetWaitableTimer"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000000.135964.06800000.00000040.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp, 00000000-00005140.00000001.136045.06690000.00000040.mdmp, 00000000-00005140.00000001.136045.06800000.00000040.mdmp") Found reference to API "MsgWaitForMultipleObjects" (Indicator: "WaitForMultipleObjects"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000000.135964.06800000.00000040.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp, 00000000-00005140.00000001.136045.06690000.00000040.mdmp, 00000000-00005140.00000001.136045.06800000.00000040.mdmp")2a:T774,Found reference to API "FreeLibrary" (Indicator: "FreeLibrary"; File: "5665f5570d006c5d08e9dfac4dc1eef5960ea07c403ffca33e88da564eaa0c83.bin") Found reference to API "LoadLibraryExW" (Indicator: "LoadLibrary"; File: "5665f5570d006c5d08e9dfac4dc1eef5960ea07c403ffca33e88da564eaa0c83.bin") Found reference to API "LoadLibraryA" (Indicator: "LoadLibrary"; File: "5665f5570d006c5d08e9dfac4dc1eef5960ea07c403ffca33e88da564eaa0c83.bin") Found reference to API "LoadLibraryA" (Indicator: "LoadLibrary"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000000.135964.65812000.00000002.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp") Found reference to API "FreeLibrary" (Indicator: "FreeLibrary"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000000.135964.06800000.00000040.mdmp, 00000000-00005140.00000000.135964.65812000.00000002.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp, 00000000-00005140.00000001.136045.06690000.00000040.mdmp, 00000000-00005140.00000001.136045.06800000.00000040.mdmp") Found reference to API "LoadLibraryExW" (Indicator: "LoadLibrary"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000000.135964.06800000.00000040.mdmp, 00000000-00005140.00000000.135964.65812000.00000002.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp, 00000000-00005140.00000001.136045.06690000.00000040.mdmp, 00000000-00005140.00000001.136045.06800000.00000040.mdmp") Found reference to API "FreeLibraryAndExitThread" (Indicator: "FreeLibrary"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000000.135964.06800000.00000040.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp, 00000000-00005140.00000001.136045.06690000.00000040.mdmp, 00000000-00005140.00000001.136045.06800000.00000040.mdmp")2b:T5b5,Found string "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/" (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+"; File: "5665f5570d006c5d08e9dfac4dc1eef5960ea07c403ffca33e88da564eaa0c83.bin") Found string "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/" (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; File: "5665f5570d006c5d08e9dfac4dc1eef5960ea07c403ffca33e88da564eaa0c83.bin") file/memory contains long string with (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+"; File: "000015603625E5DF.exe") file/memory contains long string with (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; File: "000015603625E5DF.exe") Found string "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/" (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000000.135964.65812000.00000002.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp") Found string "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/" (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000000.135964.65812000.00000002.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp")2c:T8dc,Found reference to "8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA10" (Indicator: "SHA384"; File: "5665f5570d006c5d08e9dfac4dc1eef5960ea07c403ffca33e88da564eaa0c83.bin") Found reference to "Mhttp://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S" (Indicator: "SHA384"; File: "5665f5570d006c5d08e9dfac4dc1eef5960ea07c403ffca33e88da564eaa0c83.bin") Found reference to "Mhttp://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0" (Indicator: "SHA384"; File: "5665f5570d006c5d08e9dfac4dc1eef5960ea07c403ffca33e88da564eaa0c83.bin") Found reference to "Phttp://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0" (Indicator: "SHA384"; File: "5665f5570d006c5d08e9dfac4dc1eef5960ea07c403ffca33e88da564eaa0c83.bin") Found reference to "8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1" (Indicator: "SHA384"; File: "5665f5570d006c5d08e9dfac4dc1eef5960ea07c403ffca33e88da564eaa0c83.bin") file/memory contains long string with (Indicator: "Oid"; File: "000015603625E5DF.exe") Found reference to "8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA10" (Indicator: "SHA384"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp") Found reference to "Mhttp://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S" (Indicator: "SHA384"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp") Found reference to "Mhttp://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0" (Indicator: "SHA384"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp") Found reference to "Phttp://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0" (Indicator: "SHA384"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp") Found reference to "8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1" (Indicator: "SHA384"; Source: "00000000-00005140.00000000.135964.04DF0000.00000004.mdmp, 00000000-00005140.00000001.136045.04DF0000.00000004.mdmp")2d:T88a,"