21:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/4109t72175nm8.js","/_next/static/chunks/04k_7k5p4krw4.js","/_next/static/chunks/30r--1re9i9ly.js"],"SampleDetailWrapper"] 31:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js"],"IconMark"] 20:T4e6,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Win/malicious_confidence_100% Sample af3a25f876e1… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample af3a25f876e1…. Malware family: Win/malicious_confidence_100%. Threat score 100/100. 7/28 AV engines flagged this file. 5 malicious and 8 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/af3a25f876e1685971b8afcff0f49d0eac035f096255bc54c4e09677f89898d3","keywords":["Malicious","Win/malicious_confidence_100%","malware analysis","sandbox report","threat intelligence","af3a25f876e1685971b8afcff0f49d0eac035f096255bc54c4e09677f89898d3"],"about":{"@type":"SoftwareApplication","name":"M.T.MH.HIGHLANDER.VESSEL.INFORMATION.exe","applicationCategory":["peexe","assembly","executable"],"identifier":"af3a25f876e1685971b8afcff0f49d0eac035f096255bc54c4e09677f89898d3","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Win/malicious_confidence_100%","antivirusDetections":{"malicious":7,"total":28},"behavioralIndicators":{"malicious":5,"suspicious":8},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}22:T502,"?.ph\"\n Heuristic match: \"73?.kr\"\n Heuristic match: \"57|&.bn\"\n Heuristic match: \"8db.hr\"\n Heuristic match: \"vtj.gh\"\n Heuristic match: \"qw.gf\"\n Heuristic match: \"$this.name\"","origin":"File/Memory","mitre_attack_id":"T1071","relevance":3,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"6a2908ff68c37fed10060725"}]},{"level":"informative","category":"Pattern Matching","name":"YARA signature match - AES encryption","description":"YARA signature for AES encryption matched on process \"00000000-00002796\"","origin":"YARA Signature","mitre_attack_id":"T1027","relevance":5,"id":"yara-103","sources":[{"report_type":"sandbox","report_id":"6a2908ff68c37fed10060725"}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Calls an API typically used for searching a directory for files","description":"$30","origin":"API Call","mitre_attack_id":"T1083","relevance":5,"id":"api-102","sources":[{"report_type":"sandbox","report_id":"6a2908ff68c37fed10060725"}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Calls an API typically used for taking snapshot of the specified processes","description":"\"