24:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/3fc9w1ah_nm2g.js"],"SampleDetailWrapper"] 49:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T4cc,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Trojan.Generic Sample 5cc4545a085b… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 5cc4545a085b…. Malware family: Trojan.Generic. Threat score 100/100. 18/27 AV engines flagged this file. 16 malicious and 11 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e","keywords":["Malicious","Trojan.Generic","malware analysis","sandbox report","threat intelligence","5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e"],"about":{"@type":"SoftwareApplication","name":"5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin","applicationCategory":["peexe","assembly","executable"],"identifier":"5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Trojan.Generic","antivirusDetections":{"malicious":18,"total":27},"behavioralIndicators":{"malicious":16,"suspicious":11},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T962,Observed namespace "System.IO.MemoryStream" and TypeReference ".ctor" in "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin" Observed namespace "System.Runtime.InteropServices.Marshal" and TypeReference "SizeOf" in "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin" Observed namespace "System.Runtime.InteropServices.Marshal" and TypeReference "ReleaseComObject" in "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin" Observed namespace "System.Runtime.InteropServices.Marshal" and TypeReference "ReadInt32" in "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin" Observed namespace "System.Runtime.InteropServices.Marshal" and TypeReference "ReadInt16" in "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin" Observed namespace "System.Runtime.InteropServices.Marshal" and TypeReference "PtrToStringAnsi" in "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin" Observed namespace "System.Runtime.InteropServices.Marshal" and TypeReference "GetDelegateForFunctionPointer" in "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin" Observed namespace "System.Runtime.InteropServices.Marshal" and TypeReference "Copy" in "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin" Observed namespace "System.IO.MemoryStream" and TypeReference "ToArray" in "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin" Observed namespace "System.IO.MemoryStream" and TypeReference ".ctor" in "Zalo.exe" Observed namespace "System.Runtime.InteropServices.Marshal" and TypeReference "SizeOf" in "Zalo.exe" Observed namespace "System.Runtime.InteropServices.Marshal" and TypeReference "ReleaseComObject" in "Zalo.exe" Observed namespace "System.Runtime.InteropServices.Marshal" and TypeReference "ReadInt32" in "Zalo.exe" Observed namespace "System.Runtime.InteropServices.Marshal" and TypeReference "ReadInt16" in "Zalo.exe" Observed namespace "System.Runtime.InteropServices.Marshal" and TypeReference "PtrToStringAnsi" in "Zalo.exe" Observed namespace "System.Runtime.InteropServices.Marshal" and TypeReference "GetDelegateForFunctionPointer" in "Zalo.exe" Observed namespace "System.Runtime.InteropServices.Marshal" and TypeReference "Copy" in "Zalo.exe" Observed namespace "System.IO.MemoryStream" and TypeReference "ToArray" in "Zalo.exe"26:T14b4,Found reference to "HMACSHA256" (Indicator: "HMAC"; File: "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin") Found reference to "HMACSHA256" (Indicator: "HMACSHA256"; File: "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin") Found reference to "Aes256" (Indicator: "Aes"; File: "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin") Found reference to "SHA256Managed" (Indicator: "SHA256Managed"; File: "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin") Found reference to "CryptoStreamMode" (Indicator: "CryptoStream"; File: "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin") Found reference to "CryptoConfig" (Indicator: "CryptoConfig"; File: "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin") Found reference to "CryptoStream" (Indicator: "CryptoStream"; File: "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin") Found reference to "SymmetricAlgorithm" (Indicator: "SymmetricAlgorithm"; File: "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin") Found reference to "AsymmetricAlgorithm" (Indicator: "AsymmetricAlgorithm"; File: "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin") Found reference to "HashAlgorithm" (Indicator: "HashAlgorithm"; File: "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin") Found reference to "CryptographicException" (Indicator: "CryptographicException"; File: "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin") Found reference to "MD5CryptoServiceProvider" (Indicator: "MD5CryptoServiceProvider"; File: "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin") Found reference to "RSACryptoServiceProvider" (Indicator: "RSACryptoServiceProvider"; File: "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin") Found reference to "AesCryptoServiceProvider" (Indicator: "Aes"; File: "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin") Found reference to "AesCryptoServiceProvider" (Indicator: "AesCryptoServiceProvider"; File: "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin") Found reference to "Rfc2898DeriveBytes" (Indicator: "DeriveBytes"; File: "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin") Found reference to "Rfc2898DeriveBytes" (Indicator: "Rfc2898DeriveBytes"; File: "5cc4545a085bd7ef26ac7c83920f8ed1cae79983a5e902cfc60290053d4b439e.bin") file/memory contains long string with (Indicator: "Aes"; File: "Zalo.exe") file/memory contains long string with (Indicator: "AesCryptoServiceProvider"; File: "Zalo.exe") file/memory contains long string with (Indicator: "AsymmetricAlgorithm"; File: "Zalo.exe") file/memory contains long string with (Indicator: "CryptoConfig"; File: "Zalo.exe") file/memory contains long string with (Indicator: "CryptographicException"; File: "Zalo.exe") file/memory contains long string with (Indicator: "CryptoStream"; File: "Zalo.exe") file/memory contains long string with (Indicator: "DeriveBytes"; File: "Zalo.exe") file/memory contains long string with (Indicator: "HashAlgorithm"; File: "Zalo.exe") file/memory contains long string with (Indicator: "HMAC"; File: "Zalo.exe") file/memory contains long string with (Indicator: "HMACSHA256"; File: "Zalo.exe") file/memory contains long string with (Indicator: "MD5CryptoServiceProvider"; File: "Zalo.exe") file/memory contains long string with (Indicator: "Rfc2898DeriveBytes"; File: "Zalo.exe") file/memory contains long string with (Indicator: "RSACryptoServiceProvider"; File: "Zalo.exe") file/memory contains long string with (Indicator: "SHA256Managed"; File: "Zalo.exe") file/memory contains long string with (Indicator: "SymmetricAlgorithm"; File: "Zalo.exe") Found reference to "HMACSHA256" (Indicator: "HMAC"; Source: "00000000-00002296.00000001.157750.00622000.00000002.mdmp") Found reference to "HMACSHA256" (Indicator: "HMACSHA256"; Source: "00000000-00002296.00000001.157750.00622000.00000002.mdmp") Found reference to "Aes256" (Indicator: "Aes"; Source: "00000000-00002296.00000001.157750.00622000.00000002.mdmp") Found reference to "SHA256Managed" (Indicator: "SHA256Managed"; Source: "00000000-00002296.00000001.157750.00622000.00000002.mdmp") Found reference to "CryptoStreamMode" (Indicator: "CryptoStream"; Source: "00000000-00002296.00000001.157750.00622000.00000002.mdmp") Found reference to "CryptoConfig" (Indicator: "CryptoConfig"; Source: "00000000-00002296.00000001.157750.00622000.00000002.mdmp") Found reference to "CryptoStream" (Indicator: "CryptoStream"; Source: "00000000-00002296.00000001.157750.00622000.00000002.mdmp") Found reference to "SymmetricAlgorithm" (Indicator: "SymmetricAlgorithm"; Source: "00000000-00002296.00000001.157750.00622000.00000002.mdmp") Found reference to "AsymmetricAlgorithm" (Indicator: "AsymmetricAlgorithm"; Source: "00000000-00002296.00000001.157750.00622000.00000002.mdmp") Found reference to "HashAlgorithm" (Indicator: "HashAlgorithm"; Source: "00000000-00002296.00000001.157750.00622000.00000002.mdmp") Found reference to "CryptographicException" (Indicator: "CryptographicException"; Source: "00000000-00002296.00000001.157750.00622000.00000002.mdmp")27:Ta9c,"