21:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/4109t72175nm8.js","/_next/static/chunks/04k_7k5p4krw4.js","/_next/static/chunks/30r--1re9i9ly.js"],"SampleDetailWrapper"] 34:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js"],"IconMark"] 20:T49c,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Trojan.NanoCore Sample 6f0219fb6198… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 6f0219fb6198…. Malware family: Trojan.NanoCore. Threat score 100/100. 21/27 AV engines flagged this file. 6 malicious and 18 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/6f0219fb619845864f18d8dbe093e323fe6bd9a314e10c5affe9549024029b70","keywords":["Malicious","Trojan.NanoCore","malware analysis","sandbox report","threat intelligence","6f0219fb619845864f18d8dbe093e323fe6bd9a314e10c5affe9549024029b70"],"about":{"@type":"SoftwareApplication","name":"skyupdragon.io.exe","applicationCategory":["peexe","assembly","executable"],"identifier":"6f0219fb619845864f18d8dbe093e323fe6bd9a314e10c5affe9549024029b70","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Trojan.NanoCore","antivirusDetections":{"malicious":21,"total":27},"behavioralIndicators":{"malicious":6,"suspicious":18},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}22:Te07,Observed system executable string:"%WINDIR%\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll" [Source: 00000000-00004772-00000C2D-1252419118] Observed system executable string:"%WINDIR%\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll" [Source: 00000000-00004772-00000C2A-3515010311] Observed system executable string:"%WINDIR%\assembly\NativeImages_v2.0.50727_32\mscorlib\7aa13700a6fcdcb57e6cb353e54d0ab9\mscorlib.ni.dll" [Source: 00000000-00004772-00000C2A-3515292413] Observed system executable string:"%WINDIR%\Microsoft.NET\Framework\v2.0.50727\ole32.dll" [Source: 00000000-00004772-00000C2A-3515324255] Observed system executable string:"%WINDIR%\assembly\NativeImages_v2.0.50727_32\System\61e9a201160f8baed9f7e00a4969992e\System.ni.dll" [Source: 00000000-00004772-00000C2A-3515480404] Observed system executable string:"%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Drawing\d6163e1c32eba738e42523885580dc48\System.Drawing.ni.dll" [Source: 00000000-00004772-00000C2A-3515507857] Observed system executable string:"%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\860a4e79adbd2eb86ade9317e1cd9d2a\System.Windows.Forms.ni.dll" [Source: 00000000-00004772-00000C2A-3515538063] Observed system executable string:"%WINDIR%\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll" [Source: 00000000-00004772-00000C2A-3515583179] Observed system executable string:"%WINDIR%\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\5f0a85c2a45c0fb0d1d12e010857a907\Microsoft.VisualBasic.ni.dll" [Source: 00000000-00004772-00000C2A-3515617206] Observed system executable string:"%WINDIR%\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\uxtheme.dll" [Source: 00000000-00004772-00000C2A-3515775966] Observed system executable string:"%WINDIR%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll" [Source: 00000000-00004772-00000C2A-3515903687] Observed system executable string:"%WINDIR%\SysWOW64\mscoree.dll" [Source: 00000000-00004772-00000C2A-3516184167] Observed system executable string:"%WINDIR%\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll" [Source: 00000000-00004772-00000C2A-3516233344] Observed system executable string:"%WINDIR%\Microsoft.NET\Framework\v2.0.50727\culture.dll" [Source: 00000000-00004772-00000C2A-3516666303] Observed system executable string:"%WINDIR%\Microsoft.NET\Framework\v2.0.50727\en-US\mscorrc.dll" [Source: 00000000-00004772-00000C2A-3516700492] Observed system executable string:"%WINDIR%\Microsoft.NET\Framework\v2.0.50727\en\mscorrc.dll" [Source: 00000000-00004772-00000C2A-3516726873] Observed system executable string:"%WINDIR%\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll" [Source: 00000000-00004772-00000C2A-3516752462] Observed system executable string:"%WINDIR%\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\psapi.dll" [Source: 00000000-00004772-00000C2A-3516876644] Observed system executable string:"%WINDIR%\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ntdll.dll" [Source: 00000000-00004772-00000C2A-3516973737] Observed system executable string:"%WINDIR%\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ws2_32.dll" [Source: 00000000-00004772-00000C2A-3517072617] Observed system executable string:"%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Configuration\cd4b9b7e793d3fe3ad5c9542420992be\System.Configuration.ni.dll" [Source: 00000000-00004772-00000C2A-3517181822] Observed system executable string:"%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Xml\c7a2f551c65c81870e822e9e134513f9\System.Xml.ni.dll" [Source: 00000000-00004772-00000C2A-3517217654]23:T908,"