26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 3b:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T48f,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Mint.Zard.Generic Sample 74fcf1e27180… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 74fcf1e27180…. Malware family: Mint.Zard.Generic. Threat score 100/100. 14/27 AV engines flagged this file. 5 malicious and 16 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/74fcf1e27180d840b8de78ec4cfbb48e5b7a43f13c579c9afbef17fc2b47ac02","keywords":["Malicious","Mint.Zard.Generic","malware analysis","sandbox report","threat intelligence","74fcf1e27180d840b8de78ec4cfbb48e5b7a43f13c579c9afbef17fc2b47ac02"],"about":{"@type":"SoftwareApplication","name":"file.exe","applicationCategory":["peexe","executable"],"identifier":"74fcf1e27180d840b8de78ec4cfbb48e5b7a43f13c579c9afbef17fc2b47ac02","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Mint.Zard.Generic","antivirusDetections":{"malicious":14,"total":27},"behavioralIndicators":{"malicious":5,"suspicious":16},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T708,Contains base64 string in header "like" in header "GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: icanhazip.com" Contains base64 string in header "4664" in header "GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: icanhazip.com" Contains base64 string in header "/sex/k/n" in header "GET /sex/k/n.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 178.16.54.109" Contains base64 string in header "like" in header "GET /sex/k/n.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 178.16.54.109" Contains base64 string in header "4664" in header "GET /sex/k/n.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 178.16.54.109" Contains base64 string in header "/sex/k/15866" in header "GET /sex/k/15866.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 178.16.54.109" Contains base64 string in header "like" in header "GET /sex/k/15866.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 178.16.54.109" Contains base64 string in header "4664" in header "GET /sex/k/15866.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 178.16.54.109"28:T775," HTTP/1.1 200 OK Date: Wed 14 Jan 2026 23:06:32 GMT Content-Type: text/plain Content-Length: 14 Connection: keep-alive CF-RAY: 9be0c8ce2acbba62-SJC Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Set-Cookie: __cf_bm=ImTQdfFOYA4DuvZGCOEWv1LNBpkBNURKt6yXsY9ZZUE-1768431992-1.0.1.1-pNuKBq5Qv4EQNFelqBkNGaHhJscGOy1t1X8fZsJSwxAUbnJc6cI2DZ_kFZG8Uyt40RTYgJ56VtyGeh51JGoIvX3WlVfFraxjM7zAKddZHD0; path=/; expires=Wed 14-Jan-26 23:36:32 GMT; domain=.icanhazip.com; HttpOnly Server: cloudflare alt-svc: h3=":443"; ma=86400 with response body ==>36342E3132342E31322E3136320A....... "GET /sex/k/n.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36 Host: 178.16.54.109" Response ==> HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed 14 Jan 2026 23:06:32 GMT Content-Type: text/plain Content-Length: 7 Last-Modified: Wed 14 Jan 2026 23:05:41 GMT Connection: keep-alive ETag: "69682145-7" Accept-Ranges: bytes with response body ==>3132363836330A....... "GET /sex/k/15866.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36 Host: 178.16.54.109" Response ==> HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed 14 Jan 2026 23:06:32 GMT Content-Type: text/plain Content-Length: 278494 Last-Modified: Wed 14 Jan 2026 21:01:03 GMT Connection: keep-alive ETag: "6968040f-43fde" Accept-Ranges: bytes with response body ==>343138390A666972656D616E6C696B65666972654072616D626C65722E72753A6D616E7A697261323030350A666972656D616E646B40736263676C6F62616C2E.......2d:T725,"" (Indicator: "GetDC"; Source: "00000000-00001444.00000000.227053.00830000.00000004.mdmp, 00000000-00001444.00000001.228975.00830000.00000004.mdmp, 00000000-00001444.00000002.230894.00830000.00000004.mdmp, 00000000-00001444.00000003.236404.00830000.00000004.mdmp") Found reference to API "" (Indicator: "GetDC"; Source: "00000000-00001444.00000000.227053.00830000.00000004.mdmp, 00000000-00001444.00000001.228975.00830000.00000004.mdmp, 00000000-00001444.00000002.230894.00830000.00000004.mdmp, 00000000-00001444.00000003.236404.00830000.00000004.mdmp") Found reference to API "" (Indicator: "GetWindowDC"; Source: "00000000-00001444.00000000.227053.00830000.00000004.mdmp, 00000000-00001444.00000001.228975.00830000.00000004.mdmp, 00000000-00001444.00000002.230894.00830000.00000004.mdmp, 00000000-00001444.00000003.236404.00830000.00000004.mdmp") Found reference to API "" (Indicator: "CreateDC"; Source: "00000000-00001444.00000000.227053.00830000.00000004.mdmp, 00000000-00001444.00000001.228975.00830000.00000004.mdmp, 00000000-00001444.00000002.230894.00830000.00000004.mdmp, 00000000-00001444.00000003.236404.00830000.00000004.mdmp") Found reference to API "" (Indicator: "CreateDC"; Source: "00000000-00001444.00000000.227053.00830000.00000004.mdmp, 00000000-00001444.00000001.228975.00830000.00000004.mdmp, 00000000-00001444.00000002.230894.00830000.00000004.mdmp, 00000000-00001444.00000003.236404.00830000.00000004.mdmp") Found reference to API "" (Indicator: "CreateCompatibleBitmap"; Source: "00000000-00001444.00000000.227053.00830000.00000004.mdmp, 00000000-00001444.00000001.228975.00830000.00000004.mdmp, 00000000-00001444.00000002.230894.00830000.00000004.mdmp, 00000000-00001444.00000003.236404.00830000.00000004.mdmp") Found reference to API "" (Indicator: "BitBlt"; Source: "00000000-00001444.00000000.227053.00830000.00000004.mdmp, 00000000-00001444.00000001.228975.00830000.00000004.mdmp, 00000000-00001444.00000002.230894.00830000.00000004.mdmp, 00000000-00001444.00000003.236404.00830000.00000004.mdmp") Found reference to API "" (Indicator: "CreateCompatibleDC"; Source: "00000000-00001444.00000000.227053.00830000.00000004.mdmp, 00000000-00001444.00000001.228975.00830000.00000004.mdmp, 00000000-00001444.00000002.230894.00830000.00000004.mdmp, 00000000-00001444.00000003.236404.00830000.00000004.mdmp")37:T9b8,"\" (Indicator: \"CallWindowProc\"; Source: \"00000000-00001444.00000000.227053.00830000.00000004.mdmp, 00000000-00001444.00000001.228975.00830000.00000004.mdmp, 00000000-00001444.00000002.230894.00830000.00000004.mdmp, 00000000-00001444.00000003.236404.00830000.00000004.mdmp\")","origin":"File/Memory","mitre_attack_id":"T1564.003","relevance":1,"id":"string-320","sources":[{"report_type":"sandbox","report_id":"69682159b4458b2145084bdc"}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Queries process information","description":"\"\" (Indicator: \"enumchildwindows\"; Source: \"00000000-00001444.00000000.227053.00830000.00000004.mdmp, 00000000-00001444.00000001.228975.00830000.00000004.mdmp, 00000000-00001444.00000002.230894.00830000.00000004.mdmp, 00000000-00001444.00000003.236404.00830000.00000004.mdmp\")","origin":"File/Memory","mitre_attack_id":"T1055.015","relevance":1,"id":"string-721","sources":[{"report_type":"sandbox","report_id":"69682159b4458b2145084bdc"}]},{"level":"informative","category":"Environment Awareness","name":"Attempts to call APIs commonly associated with anti-analysis and evasion techniques","description":"\" Microsoft\"","origin":"Static Parser","mitre_attack_id":"T1027.002","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"69682159b4458b2145084bdc"}]},{"level":"informative","category":"Unusual Characteristics","name":"Reads the windows installation language","description":"\"