21:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/4109t72175nm8.js","/_next/static/chunks/04k_7k5p4krw4.js","/_next/static/chunks/30r--1re9i9ly.js"],"SampleDetailWrapper"] 36:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js"],"IconMark"] 20:T50e,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Shellcode.Loader.Marte.X.Generic Sample 801d8900dfe1… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 801d8900dfe1…. Malware family: Shellcode.Loader.Marte.X.Generic. Threat score 100/100. 18/27 AV engines flagged this file. 3 malicious and 8 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/801d8900dfe1780f97b63dde42e1e0adc78b03f59ace6b873d404c4d153f7348","keywords":["Malicious","Shellcode.Loader.Marte.X.Generic","malware analysis","sandbox report","threat intelligence","801d8900dfe1780f97b63dde42e1e0adc78b03f59ace6b873d404c4d153f7348"],"about":{"@type":"SoftwareApplication","name":"801d8900dfe1780f97b63dde42e1e0adc78b03f59ace6b873d404c4d153f7348.bin","applicationCategory":["peexe","64bits","executable"],"identifier":"801d8900dfe1780f97b63dde42e1e0adc78b03f59ace6b873d404c4d153f7348","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Shellcode.Loader.Marte.X.Generic","antivirusDetections":{"malicious":18,"total":27},"behavioralIndicators":{"malicious":3,"suspicious":8},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}22:T467,Found reference to API "QueryPerformanceCounter" (Indicator: "QueryPerformanceCounter"; File: "801d8900dfe1780f97b63dde42e1e0adc78b03f59ace6b873d404c4d153f7348.bin") Found reference to API "QueryPerformanceFrequency" (Indicator: "QueryPerformanceFrequency"; File: "801d8900dfe1780f97b63dde42e1e0adc78b03f59ace6b873d404c4d153f7348.bin") Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTimeAsFileTime"; File: "801d8900dfe1780f97b63dde42e1e0adc78b03f59ace6b873d404c4d153f7348.bin") Found reference to API "WaitForSingleObject" (Indicator: "WaitForSingleObject"; Source: "00000000-00008328.00000000.140605.57F20000.00000004.mdmp") Found reference to API "QueryPerformanceCounter" (Indicator: "QueryPerformanceCounter"; Source: "00000000-00008328.00000000.140605.D6F8E000.00000004.mdmp") Found reference to API "QueryPerformanceFrequency" (Indicator: "QueryPerformanceFrequency"; Source: "00000000-00008328.00000000.140605.D6F8E000.00000004.mdmp") Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTimeAsFileTime"; Source: "00000000-00008328.00000000.140605.D6F8E000.00000004.mdmp")23:T418,Found string "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/" (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+"; File: "801d8900dfe1780f97b63dde42e1e0adc78b03f59ace6b873d404c4d153f7348.bin") Found string "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/" (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; File: "801d8900dfe1780f97b63dde42e1e0adc78b03f59ace6b873d404c4d153f7348.bin") Found string "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/" (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+"; Source: "00000000-00008328.00000000.140605.57F20000.00000004.mdmp, 00000000-00008328.00000000.140605.D6F8E000.00000004.mdmp") Found string "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/" (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; Source: "00000000-00008328.00000000.140605.57F20000.00000004.mdmp, 00000000-00008328.00000000.140605.D6F8E000.00000004.mdmp")24:T502," \"7yrc5qxEE7Q+lXlw6CLPhAvD9qxLi473WvxiW0u0GeoIc3Yrr3iB1xlpiKfRy28/71KBvbSp9vugf2+kcYlVvBpw4Zg9CDftCKYga4nva5PV9s9RqWqvvAzA1oz8EEpE5of6SKI5\" HTTP/1.1 404 Not Found\nServer: nginx/1.24.0 (Ubuntu)\nDate: Wed\n 18 Feb 2026 12:32:48 GMT\nContent-Type: text/html\nContent-Length: 0\nConnection: keep-alive\nLast-Modified: Sat\n 20 Dec 2025 11:47:18 GMT\nETag: \"0-64660c1883d80\"\nAccept-Ranges: bytes with no response body","origin":"Network Traffic","mitre_attack_id":"T1041","relevance":5,"id":"network-4","sources":[{"report_type":"sandbox","report_id":"6995b1534efe558534014960"}]},{"level":"suspicious","category":"Network Related","name":"Sends traffic on typical HTTP outbound port, but without HTTP header","description":"TCP traffic to 91.196.33.68 on port 80 is sent without HTTP header","origin":"Network Traffic","mitre_attack_id":"T1071.001","relevance":5,"id":"network-23","sources":[{"report_type":"sandbox","report_id":"6995b1534efe558534014960"}]},{"level":"suspicious","category":"Ransomware/Banking","name":"Checks warning level of secure to non-secure traffic redirection","description":"\"