26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 33:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T50d,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Dump:Generic.Cobaltstrike.Marte.B Sample 7b9778ed8559… — Score 89/100 — Hybrid Analysis","description":"Malicious verdict for sample 7b9778ed8559…. Malware family: Dump:Generic.Cobaltstrike.Marte.B. Threat score 89/100. 6/27 AV engines flagged this file. 7 malicious and 7 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/7b9778ed8559d714a26fc42c12a297658c8441ee790377944caa7d2d2eee06a1","keywords":["Malicious","Dump:Generic.Cobaltstrike.Marte.B","malware analysis","sandbox report","threat intelligence","7b9778ed8559d714a26fc42c12a297658c8441ee790377944caa7d2d2eee06a1"],"about":{"@type":"SoftwareApplication","name":"7b9778ed8559d714a26fc42c12a297658c8441ee790377944caa7d2d2eee06a1.bin","applicationCategory":["peexe","64bits","executable"],"identifier":"7b9778ed8559d714a26fc42c12a297658c8441ee790377944caa7d2d2eee06a1","additionalType":"Malicious sample"},"threatScore":89,"malwareFamily":"Dump:Generic.Cobaltstrike.Marte.B","antivirusDetections":{"malicious":6,"total":27},"behavioralIndicators":{"malicious":7,"suspicious":7},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T634,Found reference to API "VirtualAllocEx" (Indicator: "VirtualAlloc"; File: "7b9778ed8559d714a26fc42c12a297658c8441ee790377944caa7d2d2eee06a1.bin") Found reference to API "VirtualAllocEx" (Indicator: "VirtualAllocEx"; File: "7b9778ed8559d714a26fc42c12a297658c8441ee790377944caa7d2d2eee06a1.bin") Found reference to API "WriteProcessMemory" (Indicator: "WriteProcessMemory"; File: "7b9778ed8559d714a26fc42c12a297658c8441ee790377944caa7d2d2eee06a1.bin") Found reference to API "VirtualAlloc" (Indicator: "VirtualAlloc"; File: "7b9778ed8559d714a26fc42c12a297658c8441ee790377944caa7d2d2eee06a1.bin") Found reference to API "NtMapViewOfSection" (Indicator: "NtMapViewOfSection"; Source: "00000000-00004388.00000000.161647.A03A5000.00000004.mdmp") Found reference to API "CreateThreadpoolTimer" (Indicator: "CreateThread"; Source: "00000000-00004388.00000000.161647.A03A5000.00000004.mdmp") Found reference to API "CreateThreadpoolWait" (Indicator: "CreateThread"; Source: "00000000-00004388.00000000.161647.A03A5000.00000004.mdmp") Found reference to API "VirtualAlloc" (Indicator: "VirtualAlloc"; Source: "00000000-00004388.00000000.161647.A03F6000.00000002.mdmp") Found reference to API "VirtualAllocEx" (Indicator: "VirtualAlloc"; Source: "00000000-00004388.00000000.161647.A03F6000.00000002.mdmp") Found reference to API "VirtualAllocEx" (Indicator: "VirtualAllocEx"; Source: "00000000-00004388.00000000.161647.A03F6000.00000002.mdmp") Found reference to API "WriteProcessMemory" (Indicator: "WriteProcessMemory"; Source: "00000000-00004388.00000000.161647.A03F6000.00000002.mdmp")28:T14f6,Assembly shows XOR instruction xor rax rsp in Stream UID: 50894-896-00000001400894AC Assembly shows XOR instruction xor eax esp in Stream UID: 50894-896-00000001400894AC Assembly shows XOR instruction xor rcx rsp in Stream UID: 50894-896-00000001400894AC Assembly shows XOR instruction xor ecx esp in Stream UID: 50894-896-00000001400894AC Assembly shows XOR instruction xor r9 r8 in Stream UID: 50894-1038-0000000140081520 Assembly shows XOR instruction xor ecx eax in Stream UID: 50894-1038-0000000140081520 Assembly shows XOR instruction xor rax rsp in Stream UID: 50894-1045-0000000140080FC0 Assembly shows XOR instruction xor eax esp in Stream UID: 50894-1045-0000000140080FC0 Assembly shows XOR instruction xor rcx rsp in Stream UID: 50894-1045-0000000140080FC0 Assembly shows XOR instruction xor ecx esp in Stream UID: 50894-1045-0000000140080FC0 Assembly shows XOR instruction xor rax rsp in Stream UID: 50894-1056-0000000140080B8C Assembly shows XOR instruction xor eax esp in Stream UID: 50894-1056-0000000140080B8C Assembly shows XOR instruction xor rcx rsp in Stream UID: 50894-1056-0000000140080B8C Assembly shows XOR instruction xor ecx esp in Stream UID: 50894-1056-0000000140080B8C Assembly shows XOR instruction xor rax rsp in Stream UID: 50894-1058-00000001400808B0 Assembly shows XOR instruction xor eax esp in Stream UID: 50894-1058-00000001400808B0 Assembly shows XOR instruction xor rcx rsp in Stream UID: 50894-1058-00000001400808B0 Assembly shows XOR instruction xor ecx esp in Stream UID: 50894-1058-00000001400808B0 Assembly shows XOR instruction xor rax rsp in Stream UID: 50894-1063-00000001400804FC Assembly shows XOR instruction xor eax esp in Stream UID: 50894-1063-00000001400804FC Assembly shows XOR instruction xor rcx rsp in Stream UID: 50894-1063-00000001400804FC Assembly shows XOR instruction xor ecx esp in Stream UID: 50894-1063-00000001400804FC Assembly shows XOR instruction xor rax rsp in Stream UID: 50894-1172-00000001400771F8 Assembly shows XOR instruction xor eax esp in Stream UID: 50894-1172-00000001400771F8 Assembly shows XOR instruction xor rcx rsp in Stream UID: 50894-1172-00000001400771F8 Assembly shows XOR instruction xor ecx esp in Stream UID: 50894-1172-00000001400771F8 Assembly shows XOR instruction xor rax rbp in Stream UID: 50894-1190-0000000140033B17 Assembly shows XOR instruction xor eax ebp in Stream UID: 50894-1190-0000000140033B17 Assembly shows XOR instruction xor rcx rbp in Stream UID: 50894-1190-0000000140033B17 Assembly shows XOR instruction xor ecx ebp in Stream UID: 50894-1190-0000000140033B17 Assembly shows XOR instruction xor rax rsp in Stream UID: 50894-1819-000000014004E3C0 Assembly shows XOR instruction xor eax esp in Stream UID: 50894-1819-000000014004E3C0 Assembly shows XOR instruction xor rcx rsp in Stream UID: 50894-1819-000000014004E3C0 Assembly shows XOR instruction xor ecx esp in Stream UID: 50894-1819-000000014004E3C0 Assembly shows XOR instruction xor rax rsp in Stream UID: 50894-1881-000000014004B434 Assembly shows XOR instruction xor eax esp in Stream UID: 50894-1881-000000014004B434 Assembly shows XOR instruction xor rcx rsp in Stream UID: 50894-1881-000000014004B434 Assembly shows XOR instruction xor ecx esp in Stream UID: 50894-1881-000000014004B434 Assembly shows XOR instruction xor rax rsp in Stream UID: 50894-1906-0000000140049344 Assembly shows XOR instruction xor eax esp in Stream UID: 50894-1906-0000000140049344 Assembly shows XOR instruction xor rcx rsp in Stream UID: 50894-1906-0000000140049344 Assembly shows XOR instruction xor ecx esp in Stream UID: 50894-1906-0000000140049344 Assembly shows XOR instruction xor rax rsp in Stream UID: 50894-1907-0000000140049200 Assembly shows XOR instruction xor eax esp in Stream UID: 50894-1907-0000000140049200 Assembly shows XOR instruction xor rcx rsp in Stream UID: 50894-1907-0000000140049200 Assembly shows XOR instruction xor ecx esp in Stream UID: 50894-1907-0000000140049200 Assembly shows XOR instruction xor rcx rsp in Stream UID: 50894-3049-000000014007BF2E Assembly shows XOR instruction xor ecx esp in Stream UID: 50894-3049-000000014007BF2E Assembly shows XOR instruction xor r8 rdx in Stream UID: 50894-3087-000000014008134F Assembly shows XOR instruction xor eax edx in Stream UID: 50894-3087-000000014008134F Assembly shows XOR instruction xor rdx r8 in Stream UID: 50894-3088-0000000140081495 Assembly shows XOR instruction xor edx eax in Stream UID: 50894-3088-0000000140081495 Assembly shows XOR instruction xor qword ptr [rbp+10h] rax in Stream UID: 50894-3939-000000014003A2B5 Assembly shows XOR instruction xor dword ptr [rbp+10h] eax in Stream UID: 50894-3939-000000014003A2B5 Assembly shows XOR instruction xor rax qword ptr [rbp+20h] in Stream UID: 50894-3939-000000014003A2B5 Assembly shows XOR instruction xor eax dword ptr [rbp+20h] in Stream UID: 50894-3939-000000014003A2B5 Assembly shows XOR instruction xor rax qword ptr [rbp+10h] in Stream UID: 50894-3939-000000014003A2B5 Assembly shows XOR instruction xor eax dword ptr [rbp+10h] in Stream UID: 50894-3939-000000014003A2B5 Assembly shows XOR instruction xor rax rcx in Stream UID: 50894-3939-000000014003A2B5 Assembly shows XOR instruction xor eax ecx in Stream UID: 50894-3939-000000014003A2B529:T7c0,Found reference to API "EnumSystemLocalesW" (Indicator: "EnumSystemLocales"; File: "7b9778ed8559d714a26fc42c12a297658c8441ee790377944caa7d2d2eee06a1.bin") Found reference to API "GetLocaleInfoW" (Indicator: "GetLocaleInfo"; File: "7b9778ed8559d714a26fc42c12a297658c8441ee790377944caa7d2d2eee06a1.bin") Found reference to API "GetUserDefaultLCID" (Indicator: "GetUserDefaultLCID"; File: "7b9778ed8559d714a26fc42c12a297658c8441ee790377944caa7d2d2eee06a1.bin") Found reference to API "EnumSystemLocalesEx" (Indicator: "EnumSystemLocales"; File: "7b9778ed8559d714a26fc42c12a297658c8441ee790377944caa7d2d2eee06a1.bin") Found reference to API "GetLocaleInfoEx" (Indicator: "GetLocaleInfo"; File: "7b9778ed8559d714a26fc42c12a297658c8441ee790377944caa7d2d2eee06a1.bin") Found reference to API "GetUserDefaultLocaleName" (Indicator: "GetUserDefaultLocaleName"; File: "7b9778ed8559d714a26fc42c12a297658c8441ee790377944caa7d2d2eee06a1.bin") Found reference to API "EnumSystemLocalesEx" (Indicator: "EnumSystemLocales"; Source: "00000000-00004388.00000000.161647.A038F000.00000002.mdmp, 00000000-00004388.00000000.161647.A03A5000.00000004.mdmp") Found reference to API "GetLocaleInfoEx" (Indicator: "GetLocaleInfo"; Source: "00000000-00004388.00000000.161647.A038F000.00000002.mdmp, 00000000-00004388.00000000.161647.A03A5000.00000004.mdmp") Found reference to API "GetUserDefaultLocaleName" (Indicator: "GetUserDefaultLocaleName"; Source: "00000000-00004388.00000000.161647.A038F000.00000002.mdmp, 00000000-00004388.00000000.161647.A03A5000.00000004.mdmp") Found reference to API "GetLocaleInfoW" (Indicator: "GetLocaleInfo"; Source: "00000000-00004388.00000000.161647.A03F6000.00000002.mdmp") Found reference to API "GetUserDefaultLCID" (Indicator: "GetUserDefaultLCID"; Source: "00000000-00004388.00000000.161647.A03F6000.00000002.mdmp") Found reference to API "EnumSystemLocalesW" (Indicator: "EnumSystemLocales"; Source: "00000000-00004388.00000000.161647.A03F6000.00000002.mdmp")2a:T4ee,Found reference to API "GetDateFormatW" (Indicator: "GetDateFormat"; File: "7b9778ed8559d714a26fc42c12a297658c8441ee790377944caa7d2d2eee06a1.bin") Found reference to API "GetTimeFormatW" (Indicator: "GetTimeFormat"; File: "7b9778ed8559d714a26fc42c12a297658c8441ee790377944caa7d2d2eee06a1.bin") Found reference to API "GetDateFormatEx" (Indicator: "GetDateFormat"; File: "7b9778ed8559d714a26fc42c12a297658c8441ee790377944caa7d2d2eee06a1.bin") Found reference to API "GetTimeFormatEx" (Indicator: "GetTimeFormat"; File: "7b9778ed8559d714a26fc42c12a297658c8441ee790377944caa7d2d2eee06a1.bin") Found reference to API "GetDateFormatEx" (Indicator: "GetDateFormat"; Source: "00000000-00004388.00000000.161647.A038F000.00000002.mdmp, 00000000-00004388.00000000.161647.A03A5000.00000004.mdmp") Found reference to API "GetTimeFormatEx" (Indicator: "GetTimeFormat"; Source: "00000000-00004388.00000000.161647.A038F000.00000002.mdmp, 00000000-00004388.00000000.161647.A03A5000.00000004.mdmp") Found reference to API "GetDateFormatW" (Indicator: "GetDateFormat"; Source: "00000000-00004388.00000000.161647.A03F6000.00000002.mdmp") Found reference to API "GetTimeFormatW" (Indicator: "GetTimeFormat"; Source: "00000000-00004388.00000000.161647.A03F6000.00000002.mdmp")2b:T775,"