26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 3e:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T48f,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Mint.Zard.Generic Sample b54f2fece16e… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample b54f2fece16e…. Malware family: Mint.Zard.Generic. Threat score 100/100. 14/27 AV engines flagged this file. 4 malicious and 16 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/b54f2fece16eac2ac92829260ff0708773fbb60e5ab1eaea4e82546dc290688a","keywords":["Malicious","Mint.Zard.Generic","malware analysis","sandbox report","threat intelligence","b54f2fece16eac2ac92829260ff0708773fbb60e5ab1eaea4e82546dc290688a"],"about":{"@type":"SoftwareApplication","name":"file.exe","applicationCategory":["peexe","executable"],"identifier":"b54f2fece16eac2ac92829260ff0708773fbb60e5ab1eaea4e82546dc290688a","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Mint.Zard.Generic","antivirusDetections":{"malicious":14,"total":27},"behavioralIndicators":{"malicious":4,"suspicious":16},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:Ta75," HTTP/1.1 200 OK Date: Sat 09 May 2026 11:13:39 GMT Content-Type: text/plain Content-Length: 14 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET set-cookie: __cf_bm=JXRenK_C9MYzSM1cKi0cZMkI5FQz1GoO.1Z2jIZ6QZE-1778325219.1760328-1.0.1.1-XxzYDG659vw3v.8D3wOtq2.7sc8xZ6POuNPpiX2CgzGYcaijKl5eX9TfaXQXMnTaiGcd97E0KFsxR1ORSPQMAf.yS85buIOclmd4KhDw2O2lVLYNcc6j.4rkQpk18uPL; HttpOnly; Path=/; Domain=icanhazip.com; Expires=Sat 09 May 2026 11:43:39 GMT Server: cloudflare CF-RAY: 9f9046abdfda7ae0-SJC alt-svc: h3=":443"; ma=86400 with response body ==>36342E3132342E31322E3136320A....... "GET /4/n.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/202.0.4664.110 Safari/537.36 Host: 130.12.180.190" Response ==> HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat 09 May 2026 11:13:39 GMT Content-Type: text/plain Content-Length: 6 Last-Modified: Mon 20 Apr 2026 02:00:15 GMT Connection: keep-alive ETag: "69e588af-6" Accept-Ranges: bytes with response body ==>36333532310A....... "GET /4/23925.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/202.0.4664.110 Safari/537.36 Host: 130.12.180.190" Response ==> HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat 09 May 2026 11:13:40 GMT Content-Type: text/plain Content-Length: 258754 Last-Modified: Sun 19 Apr 2026 15:52:56 GMT Connection: keep-alive ETag: "69e4fa58-3f2c2" Accept-Ranges: bytes with response body ==>70566F7765720A6D6163646576616E6E65617578407961686F6F2E636F2E6A703A6A6B7336756A35340A6D6972656B6F6C7363686577736B406E746C776F726C.......2e:T725,"mx02.mail.icloud.com" Heuristic match: "+mx3.hanmail.net" Heuristic match: "zmail.fums.ac.ir" Heuristic match: "mrvoqrmoqrs.mr" Heuristic match: "esacons-com.mail.protection.outlook.com" Heuristic match: "net.pl" Heuristic match: "eb.de" Heuristic match: "lu-ulpgc-es.mail.protection.outlook.com" Heuristic match: "sn-com.olc.protection.outlook.com" Heuristic match: ".beavis99.net" Heuristic match: ".hostinger.com" Heuristic match: "pmx.l.google.com" Heuristic match: "hii-com.mail.protection.outlook.com" Heuristic match: "hoodns.net" Heuristic match: "mx-eu.ma" Heuristic match: "0.yahoodns.net" Heuristic match: "d.cloud.openwave.ai" Heuristic match: "x1.seznam.cz" Heuristic match: "outlook.com" Heuristic match: "x01.mail.com" Heuristic match: "ail.nl" Heuristic match: "wave.ai" Heuristic match: "sdcloud.mail.protection.outlook.com" Heuristic match: "nw.wanadoo.es" Heuristic match: "n.outlook.com" Heuristic match: "tudent-fortbendisd-com.mail.protection.outlook.com" Heuristic match: "ecv6.erinn.biz" Heuristic match: "mail.protection.outlook.com" Heuristic match: "dia.com" Heuristic match: "nmedia.com" Heuristic match: "ginmedia.com" Heuristic match: "otonmail.ch" Heuristic match: "x2-usg2.ppe-hosted.com" Heuristic match: "vonsidesm-com02b.mail.protection.outlook.com" Heuristic match: "x-ha.skymail.net.br" Heuristic match: "xa-00177601.gslb.pphosted.com" Heuristic match: "x004.tt.xion.oxcs.net" Heuristic match: "spmx4.googlemail.com" Heuristic match: "x1.mail.ovh.net" Heuristic match: "x4.beavis99.net" Heuristic match: "spmx3.l.google.com" Heuristic match: "mtpz4.laposte.net" Heuristic match: "rayaland.com.ph" Heuristic match: "ustmx.cscdns.net" Heuristic match: "amil.com" Heuristic match: "x.rediffmail.rediff.akadns.net" Heuristic match: "om.olc.protection.outlook.com" Heuristic match: "x2.mail.ovh.net" Heuristic match: "spmx2.l.google.com" Heuristic match: "63mx01.mxmail.netease.com" Heuristic match: "x3.mail.ovh.net" Heuristic match: "x-att.mail.am0.yahoodns.net" Heuristic match: "and.com.ph" Heuristic match: "settra.sophos.com" Heuristic match: "mx-02-us-west-2.prod.hydra.sophos.com" Heuristic match: "eception01.mail-vert.fr" Heuristic match: "ail.casascuritiba.com.br" Heuristic match: "lsmtp2.hushmail.com" Heuristic match: "ail-relay.cytanet.com.cy" Heuristic match: "oute2.mx.cloudflare.net" Heuristic match: "x4.hanmail.net" Heuristic match: "pdate.com" Heuristic match: "xin5.ziggo.nl" Heuristic match: "mx01.p.bluenet.ch" Heuristic match: "01.gslb.pphosted.com" Heuristic match: "a7.am0.yahoodns.net" Heuristic match: "a7o.ifms.edu.br" Heuristic match: "atmcast.net" Heuristic match: "x1.emailsendhub.com" Heuristic match: "ger.net" Heuristic match: "t.net" Heuristic match: "uca-jcyl-es.mail.protection.outlook.com" Heuristic match: "tion.outlook.com" Heuristic match: "mx1.privateemail.com" Heuristic match: "em.mx" Heuristic match: "dobe.mail.protection.outlook.com" Heuristic match: "hool-com.mail.protection.outlook.com" Heuristic match: "`kmta7.am0.yahoodns.net" Heuristic match: "+afmx.freemail.hu" Heuristic match: "pnmail.nl" Heuristic match: "tmx.satt.com.br" Heuristic match: "`]mx-aol.mail.gm0.yahoodns.net" Heuristic match: "rqmx2-usg2.ppe-hosted.com" Heuristic match: "ook.com" Heuristic match: "t-com.mail.protection.outlook.com" Heuristic match: "^mx-b.mail.citi.com" Heuristic match: "gmail.brazilianbroker.com.br" Heuristic match: "msn.com" Heuristic match: "ibmx01.windstream.net" Heuristic match: "e.com" Heuristic match: "a<'&urayaland.com.ph" Heuristic match: "dmx-att.mail.am0.yahoodns.net" Heuristic match: "+163mx01.mxmail.netease.com" Heuristic match: "yreception01.mail-vert.fr" Heuristic match: "4mx4.hanmail.net" Heuristic match: "el-com.mail.protection.outlook.com" Heuristic match: "ts-org.mail.protection.outlook.com" Heuristic match: "4ed'datamate-it.mail.eo.outlook.com"37:T557,Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00004556.00000000.243948.02C00000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00004556.00000001.245868.02C00000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00004556.00000002.247791.02C00000.00000004.mdmp") Found URL "http://icanhazip.com/[%s][0.0.0.0][0.0.0.0]%s.comesmtpehlo" - Source: "00000000-00004556.00000003.253302.00124000.00000002.mdmp") Found URL "http://www.localcoinswap.com" - Source: "00000000-00004556.00000003.253302.00124000.00000002.mdmp") Found URL "http://www.coinbase.com" - Source: "00000000-00004556.00000003.253302.00124000.00000002.mdmp") Found URL "http://www.binance.com" - Source: "00000000-00004556.00000003.253302.00124000.00000002.mdmp") Found URL "http://www.bitrefill.com" - Source: "00000000-00004556.00000003.253302.00124000.00000002.mdmp") Found URL "http://www.crypto.com" - Source: "00000000-00004556.00000003.253302.00124000.00000002.mdmp") Found URL "http://www.kucoin.com" - Source: "00000000-00004556.00000003.253302.00124000.00000002.mdmp") Found URL "http://www.etoro.com" - Source: "00000000-00004556.00000003.253302.00124000.00000002.mdmp") Found URL "http://www.kraken.com" - Source: "00000000-00004556.00000003.253302.00124000.00000002.mdmp")38:T614,Contacted domain: "163mx01.mxmail.netease.com" has high entropy Contacted domain: "ALT1.ASPMX.L.GOOGLE.COM" has high entropy Contacted domain: "ALT2.ASPMX.L.GOOGLE.com" has high entropy Contacted domain: "ASPMX4.GOOGLEMAIL.COM" has high entropy Contacted domain: "alt3.aspmx.l.google.com" has high entropy Contacted domain: "alt4.aspmx.l.google.com" has high entropy Contacted domain: "aluno.aquarelape.com.br" has high entropy Contacted domain: "alyaharprivateschool.com" has high entropy Contacted domain: "amazonaspirangueirostours.com.br" has high entropy Contacted domain: "aspmx.whoisworks.com" has high entropy Contacted domain: "aspmx2.googlemail.com" has high entropy Contacted domain: "aspmx3.googlemail.com" has high entropy Contacted domain: "auxiliadorapredial.com.br" has high entropy Contacted domain: "avonside-sm.com" has high entropy Contacted domain: "avonsidesm-com02b.mail.protection.outlook.com" has high entropy Contacted domain: "beataes.manila.edu.ph" has high entropy Contacted domain: "bigbosslayf.com" has high entropy Contacted domain: "blueyonder.co.uk" has high entropy Contacted domain: "bookingholdings.com" has high entropy Contacted domain: "brazilianbroker.com.br" has high entropy Contacted domain: "btopenworld.com" has high entropy Contacted domain: "bucklebunniebeautie.com" has high entropy Contacted domain: "burgaflexna.com" has high entropy Contacted domain: "cdctwcgw01.timewarnercable.com" has high entropy Contacted domain: "cdhu-sp-gov-br.mail.protection.outlook.com" has high entropy39:Tac3,Found reference to API "" (Indicator: "GetDC"; Source: "00000000-00004556.00000000.243948.02C00000.00000004.mdmp, 00000000-00004556.00000001.245868.02C00000.00000004.mdmp, 00000000-00004556.00000002.247791.02C00000.00000004.mdmp, 00000000-00004556.00000003.253302.02C00000.00000004.mdmp") Found reference to API "" (Indicator: "GetDC"; Source: "00000000-00004556.00000000.243948.02C00000.00000004.mdmp, 00000000-00004556.00000001.245868.02C00000.00000004.mdmp, 00000000-00004556.00000002.247791.02C00000.00000004.mdmp, 00000000-00004556.00000003.253302.02C00000.00000004.mdmp") Found reference to API "" (Indicator: "GetWindowDC"; Source: "00000000-00004556.00000000.243948.02C00000.00000004.mdmp, 00000000-00004556.00000001.245868.02C00000.00000004.mdmp, 00000000-00004556.00000002.247791.02C00000.00000004.mdmp, 00000000-00004556.00000003.253302.02C00000.00000004.mdmp") Found reference to API "" (Indicator: "CreateDC"; Source: "00000000-00004556.00000000.243948.02C00000.00000004.mdmp, 00000000-00004556.00000001.245868.02C00000.00000004.mdmp, 00000000-00004556.00000002.247791.02C00000.00000004.mdmp, 00000000-00004556.00000003.253302.02C00000.00000004.mdmp") Found reference to API "" (Indicator: "CreateDC"; Source: "00000000-00004556.00000000.243948.02C00000.00000004.mdmp, 00000000-00004556.00000001.245868.02C00000.00000004.mdmp, 00000000-00004556.00000002.247791.02C00000.00000004.mdmp, 00000000-00004556.00000003.253302.02C00000.00000004.mdmp") Found reference to API "" (Indicator: "CreateCompatibleBitmap"; Source: "00000000-00004556.00000000.243948.02C00000.00000004.mdmp, 00000000-00004556.00000001.245868.02C00000.00000004.mdmp, 00000000-00004556.00000002.247791.02C00000.00000004.mdmp, 00000000-00004556.00000003.253302.02C00000.00000004.mdmp") Found reference to API "" (Indicator: "BitBlt"; Source: "00000000-00004556.00000000.243948.02C00000.00000004.mdmp, 00000000-00004556.00000001.245868.02C00000.00000004.mdmp, 00000000-00004556.00000002.247791.02C00000.00000004.mdmp, 00000000-00004556.00000003.253302.02C00000.00000004.mdmp") Found reference to API "" (Indicator: "CreateCompatibleDC"; Source: "00000000-00004556.00000000.243948.02C00000.00000004.mdmp, 00000000-00004556.00000001.245868.02C00000.00000004.mdmp, 00000000-00004556.00000002.247791.02C00000.00000004.mdmp, 00000000-00004556.00000003.253302.02C00000.00000004.mdmp")3a:T79f,"\" (Indicator: \"CallWindowProc\"; Source: \"00000000-00004556.00000000.243948.02C00000.00000004.mdmp, 00000000-00004556.00000001.245868.02C00000.00000004.mdmp, 00000000-00004556.00000002.247791.02C00000.00000004.mdmp, 00000000-00004556.00000003.253302.02C00000.00000004.mdmp\")","origin":"File/Memory","mitre_attack_id":"T1564.003","relevance":1,"id":"string-320","sources":[{"report_type":"sandbox","report_id":"69ff16c4d61f239b9f00b24b"}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Observed a high volume of repeated registry API calls (API Hammering)","description":"$27","origin":"Registry Access","mitre_attack_id":"T1497","relevance":7,"id":"registry-215","sources":[{"report_type":"sandbox","report_id":"69ff16c4d61f239b9f00b24b"}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Queries process information","description":"\"\" (Indicator: \"enumchildwindows\"; Source: \"00000000-00004556.00000000.243948.02C00000.00000004.mdmp, 00000000-00004556.00000001.245868.02C00000.00000004.mdmp, 00000000-00004556.00000002.247791.02C00000.00000004.mdmp, 00000000-00004556.00000003.253302.02C00000.00000004.mdmp\")","origin":"File/Memory","mitre_attack_id":"T1055.015","relevance":1,"id":"string-721","sources":[{"report_type":"sandbox","report_id":"69ff16c4d61f239b9f00b24b"}]},{"level":"informative","category":"Environment Awareness","name":"Attempts to call APIs commonly associated with anti-analysis and evasion techniques","description":"\" Microsoft\"","origin":"Static Parser","mitre_attack_id":"T1027.002","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"69ff16c4d61f239b9f00b24b"}]},{"level":"informative","category":"Unusual Characteristics","name":"Reads the windows installation language","description":"\"