24:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 3f:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T4c3,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Trojan.Generic Sample 5a6b70024cff… — Score 82/100 — Hybrid Analysis","description":"Malicious verdict for sample 5a6b70024cff…. Malware family: Trojan.Generic. Threat score 82/100. 6/28 AV engines flagged this file. 1 malicious and 17 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/5a6b70024cff8679fc0b03979eaa096cfde2b7153a35c523a4a41926b30c03bb","keywords":["Malicious","Trojan.Generic","malware analysis","sandbox report","threat intelligence","5a6b70024cff8679fc0b03979eaa096cfde2b7153a35c523a4a41926b30c03bb"],"about":{"@type":"SoftwareApplication","name":"5a6b70024cff8679fc0b03979eaa096cfde2b7153a35c523a4a41926b30c03bb.bin","applicationCategory":["peexe","64bits","executable"],"identifier":"5a6b70024cff8679fc0b03979eaa096cfde2b7153a35c523a4a41926b30c03bb","additionalType":"Malicious sample"},"threatScore":82,"malwareFamily":"Trojan.Generic","antivirusDetections":{"malicious":6,"total":28},"behavioralIndicators":{"malicious":1,"suspicious":17},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T405,Found reference to API "VirtualFree" (Indicator: "VirtualFree"; File: "5a6b70024cff8679fc0b03979eaa096cfde2b7153a35c523a4a41926b30c03bb.bin") Found reference to API "WriteProcessMemory" (Indicator: "WriteProcessMemory"; File: "5a6b70024cff8679fc0b03979eaa096cfde2b7153a35c523a4a41926b30c03bb.bin") Found reference to API "VirtualAlloc" (Indicator: "VirtualAlloc"; File: "5a6b70024cff8679fc0b03979eaa096cfde2b7153a35c523a4a41926b30c03bb.bin") Found reference to API "CreateThread" (Indicator: "CreateThread"; File: "5a6b70024cff8679fc0b03979eaa096cfde2b7153a35c523a4a41926b30c03bb.bin") Found reference to API "VirtualAllocEx" (Indicator: "VirtualAlloc"; File: "5a6b70024cff8679fc0b03979eaa096cfde2b7153a35c523a4a41926b30c03bb.bin") Found reference to API "VirtualAllocEx" (Indicator: "VirtualAllocEx"; File: "5a6b70024cff8679fc0b03979eaa096cfde2b7153a35c523a4a41926b30c03bb.bin") Found reference to API "VirtualFreeEx" (Indicator: "VirtualFree"; File: "5a6b70024cff8679fc0b03979eaa096cfde2b7153a35c523a4a41926b30c03bb.bin")26:Ta9b,Assembly shows XOR instruction xor r12d 40h in Stream UID: 833-1566-00000001400028AC Assembly shows XOR instruction xor esp 40h in Stream UID: 833-1566-00000001400028AC Assembly shows XOR instruction xor esi 10h in Stream UID: 833-1674-00000001400AFC10 Assembly shows XOR instruction xor ecx 01h in Stream UID: 833-1679-00000001400AEF48 Assembly shows XOR instruction xor byte ptr [rbp+rcx*4+4Dh] cl in Stream UID: 833-1937-0000000140020E86 Assembly shows XOR instruction xor rcx rsp in Stream UID: 833-1999-0000000140025C10 Assembly shows XOR instruction xor ecx esp in Stream UID: 833-1999-0000000140025C10 Assembly shows XOR instruction xor rcx rsp in Stream UID: 833-2405-00000001400442F3 Assembly shows XOR instruction xor ecx esp in Stream UID: 833-2405-00000001400442F3 Assembly shows XOR instruction xor edi dword ptr [rcx] in Stream UID: 833-2474-000000014004820D Assembly shows XOR instruction xor dword ptr [rcx] edi in Stream UID: 833-2474-000000014004820D Assembly shows XOR instruction xor ecx dword ptr [rax-73h] in Stream UID: 833-3141-00000001400743E4 Assembly shows XOR instruction xor ecx dword ptr [rax-75h] in Stream UID: 833-3178-00000001400758A7 Assembly shows XOR instruction xor byte ptr [rsp+rdi+60h] 80h in Stream UID: 833-3302-000000014007EAE4 Assembly shows XOR instruction xor eax 08h in Stream UID: 833-3345-0000000140080320 Assembly shows XOR instruction xor r14d 000087BCh in Stream UID: 833-3476-0000000140088AD3 Assembly shows XOR instruction xor esi 000087BCh in Stream UID: 833-3476-0000000140088AD3 Assembly shows XOR instruction xor eax 0000A685h in Stream UID: 833-3476-0000000140088AD3 Assembly shows XOR instruction xor al bl in Stream UID: 833-3476-0000000140088AD3 Assembly shows XOR instruction xor byte ptr [rcx-75h] cl in Stream UID: 833-3504-000000014008AFB3 Assembly shows XOR instruction xor eax ecx in Stream UID: 833-4046-00000001400AE2F1 Assembly shows XOR instruction xor qword ptr [rbp-10h] rax in Stream UID: 833-9670-00000001400248F5 Assembly shows XOR instruction xor dword ptr [rbp-10h] eax in Stream UID: 833-9670-00000001400248F5 Assembly shows XOR instruction xor rax qword ptr [rbp+18h] in Stream UID: 833-9670-00000001400248F5 Assembly shows XOR instruction xor eax dword ptr [rbp+18h] in Stream UID: 833-9670-00000001400248F5 Assembly shows XOR instruction xor rax qword ptr [rbp-10h] in Stream UID: 833-9670-00000001400248F5 Assembly shows XOR instruction xor eax dword ptr [rbp-10h] in Stream UID: 833-9670-00000001400248F5 Assembly shows XOR instruction xor rax rcx in Stream UID: 833-9670-00000001400248F5 Assembly shows XOR instruction xor eax ecx in Stream UID: 833-9670-00000001400248F527:T1987,Found XOR loop in file "InformationCheck.exe" at offset 209727; code bytes = 30d0 Found XOR loop in file "InformationCheck.exe" at offset 488439; code bytes = 30d0 Found XOR loop in file "InformationCheck.exe" at offset 624266; code bytes = 30d0 Found XOR loop in file "InformationCheck.exe" at offset 857601; code bytes = 30d0 Found XOR loop in file "InformationCheck.exe" at offset 872765; code bytes = 30d0 Found XOR loop in file "InformationCheck.exe" at offset 881695; code bytes = 30d0 Found XOR loop in file "InformationCheck.exe" at offset 884303; code bytes = 30d0 Found XOR loop in file "InformationCheck.exe" at offset 122211; code bytes = 33c1 Found XOR loop in file "InformationCheck.exe" at offset 243805; code bytes = 33c1 Found XOR loop in file "InformationCheck.exe" at offset 426397; code bytes = 33c1 Found XOR loop in file "InformationCheck.exe" at offset 426471; code bytes = 33c1 Found XOR loop in file "InformationCheck.exe" at offset 426655; code bytes = 33c1 Found XOR loop in file "InformationCheck.exe" at offset 426708; code bytes = 33c1 Found XOR loop in file "InformationCheck.exe" at offset 426737; code bytes = 33c1 Found XOR loop in file "InformationCheck.exe" at offset 546769; code bytes = 33c1 Found XOR loop in file "InformationCheck.exe" at offset 629178; code bytes = 33c1 Found XOR loop in file "InformationCheck.exe" at offset 635354; code bytes = 33c1 Found XOR loop in file "InformationCheck.exe" at offset 643061; code bytes = 33c1 Found XOR loop in file "InformationCheck.exe" at offset 643509; code bytes = 33c1 Found XOR loop in file "InformationCheck.exe" at offset 644085; code bytes = 33c1 Found XOR loop in file "InformationCheck.exe" at offset 644533; code bytes = 33c1 Found XOR loop in file "InformationCheck.exe" at offset 645285; code bytes = 33c1 Found XOR loop in file "InformationCheck.exe" at offset 645733; code bytes = 33c1 Found XOR loop in file "InformationCheck.exe" at offset 646309; code bytes = 33c1 Found XOR loop in file "InformationCheck.exe" at offset 646757; code bytes = 33c1 Found XOR loop in file "InformationCheck.exe" at offset 865511; code bytes = 33c1 Found XOR loop in file "InformationCheck.exe" at offset 874457; code bytes = 33c1 Found XOR loop in file "InformationCheck.exe" at offset 100479; code bytes = 8030 Found XOR loop in file "InformationCheck.exe" at offset 606796; code bytes = 8030 Found XOR loop in file "InformationCheck.exe" at offset 619146; code bytes = 8030 Found XOR loop in file "InformationCheck.exe" at offset 861962; code bytes = 8030 Found XOR loop in file "InformationCheck.exe" at offset 866398; code bytes = 8030 Found XOR loop in file "InformationCheck.exe" at offset 869928; code bytes = 8030 Found XOR loop in file "InformationCheck.exe" at offset 883204; code bytes = 8030 Found XOR loop in file "InformationCheck.exe" at offset 884284; code bytes = 8030 Found XOR loop in file "InformationCheck.exe" at offset 888180; code bytes = 8030 Found XOR loop in file "InformationCheck.exe" at offset 890356; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1115015; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1148070; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1546897; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1723235; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1765983; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1793716; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1859205; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 146759; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 195446; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 195465; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 210040; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 259738; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 259802; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 553867; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 553900; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 553958; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 553991; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 710400; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1104871; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1147047; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1274484; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1294441; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1350817; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1388400; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1403323; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1475914; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1553532; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1612487; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1631304; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1652530; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1705668; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1792963; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 805491; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1050945; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1052272; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1152178; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1195654; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1257752; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1345542; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1404478; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1466074; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1490723; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1518025; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1608084; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1633636; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1658594; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1725809; code bytes = 803028:T9f2," Microsoft Corporation\"","origin":"Static Parser","mitre_attack_id":"T1027.002","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"6a312833f3f223488d02e801"}]},{"level":"informative","category":"Unusual Characteristics","name":"Reads the windows installation language","description":"\"