26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 3d:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T48f,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Mint.Zard.Generic Sample b75c9acb2ca8… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample b75c9acb2ca8…. Malware family: Mint.Zard.Generic. Threat score 100/100. 14/27 AV engines flagged this file. 5 malicious and 18 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/b75c9acb2ca883c930191fb7f20422bd2ec48d029a58beec591f00318ce838ed","keywords":["Malicious","Mint.Zard.Generic","malware analysis","sandbox report","threat intelligence","b75c9acb2ca883c930191fb7f20422bd2ec48d029a58beec591f00318ce838ed"],"about":{"@type":"SoftwareApplication","name":"file.exe","applicationCategory":["peexe","executable"],"identifier":"b75c9acb2ca883c930191fb7f20422bd2ec48d029a58beec591f00318ce838ed","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Mint.Zard.Generic","antivirusDetections":{"malicious":14,"total":27},"behavioralIndicators":{"malicious":5,"suspicious":18},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T92d," HTTP/1.1 200 OK Date: Thu 07 May 2026 10:34:25 GMT Content-Type: text/plain Content-Length: 14 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET set-cookie: __cf_bm=8WViHMmWq9KmCRDizgmQjJKorVQzmb3BZeWOmTwt38c-1778150065.9601045-1.0.1.1-LuHqwlRCJ7Fclbm0M4dSlZ59OLGtQo_e3CwTOFDBajEe7Av7mdNIlVPEZdpPZGhftxxsKZy0a8QJ1NUS0ax9kgBLMn6J26KacpWOmmf5BjW2aDx9Rko_3YtjU900KU1G; HttpOnly; Path=/; Domain=icanhazip.com; Expires=Thu 07 May 2026 11:04:25 GMT Server: cloudflare CF-RAY: 9f7f92783c770dac-SJC alt-svc: h3=":443"; ma=86400 with response body ==>36342E3132342E31322E3136320A....... "GET /7/n.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/202.0.4664.110 Safari/537.36 Host: 130.12.180.190" Response ==> HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu 07 May 2026 10:34:26 GMT Content-Type: text/plain Content-Length: 6 Last-Modified: Wed 22 Apr 2026 01:53:33 GMT Connection: keep-alive ETag: "69e82a1d-6" Accept-Ranges: bytes with response body ==>37303739320A....... "GET /7/32213.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/202.0.4664.110 Safari/537.36 Host: 130.12.180.190" Response ==> HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu 07 May 2026 10:34:27 GMT Content-Type: text/plain Content-Length: 258433 Last-Modified: Tue 21 Apr 2026 08:18:24 GMT Connection: keep-alive ETag: "69e732d0-3f181" Accept-Ranges: bytes with response body ==>617373776F7264313233342A0A64616E63656A656E6E7964616E636540616F6C2E636F6D3A41316131366835383132330A74696666696E696275726E7340616F.......2e:T725,"" (Indicator: "GetDC"; Source: "00000000-00002868.00000000.142639.02D70000.00000004.mdmp, 00000000-00002868.00000001.144559.02D70000.00000004.mdmp, 00000000-00002868.00000002.146482.02D70000.00000004.mdmp, 00000000-00002868.00000003.151987.02D70000.00000004.mdmp") Found reference to API "" (Indicator: "GetDC"; Source: "00000000-00002868.00000000.142639.02D70000.00000004.mdmp, 00000000-00002868.00000001.144559.02D70000.00000004.mdmp, 00000000-00002868.00000002.146482.02D70000.00000004.mdmp, 00000000-00002868.00000003.151987.02D70000.00000004.mdmp") Found reference to API "" (Indicator: "GetWindowDC"; Source: "00000000-00002868.00000000.142639.02D70000.00000004.mdmp, 00000000-00002868.00000001.144559.02D70000.00000004.mdmp, 00000000-00002868.00000002.146482.02D70000.00000004.mdmp, 00000000-00002868.00000003.151987.02D70000.00000004.mdmp") Found reference to API "" (Indicator: "CreateDC"; Source: "00000000-00002868.00000000.142639.02D70000.00000004.mdmp, 00000000-00002868.00000001.144559.02D70000.00000004.mdmp, 00000000-00002868.00000002.146482.02D70000.00000004.mdmp, 00000000-00002868.00000003.151987.02D70000.00000004.mdmp") Found reference to API "" (Indicator: "CreateDC"; Source: "00000000-00002868.00000000.142639.02D70000.00000004.mdmp, 00000000-00002868.00000001.144559.02D70000.00000004.mdmp, 00000000-00002868.00000002.146482.02D70000.00000004.mdmp, 00000000-00002868.00000003.151987.02D70000.00000004.mdmp") Found reference to API "" (Indicator: "CreateCompatibleBitmap"; Source: "00000000-00002868.00000000.142639.02D70000.00000004.mdmp, 00000000-00002868.00000001.144559.02D70000.00000004.mdmp, 00000000-00002868.00000002.146482.02D70000.00000004.mdmp, 00000000-00002868.00000003.151987.02D70000.00000004.mdmp") Found reference to API "" (Indicator: "BitBlt"; Source: "00000000-00002868.00000000.142639.02D70000.00000004.mdmp, 00000000-00002868.00000001.144559.02D70000.00000004.mdmp, 00000000-00002868.00000002.146482.02D70000.00000004.mdmp, 00000000-00002868.00000003.151987.02D70000.00000004.mdmp") Found reference to API "" (Indicator: "CreateCompatibleDC"; Source: "00000000-00002868.00000000.142639.02D70000.00000004.mdmp, 00000000-00002868.00000001.144559.02D70000.00000004.mdmp, 00000000-00002868.00000002.146482.02D70000.00000004.mdmp, 00000000-00002868.00000003.151987.02D70000.00000004.mdmp")39:T6b4,Found string "A piece of advice from me: regularly change all your passwords and update your device with the latest security patches." (Indicator: "password"; File: "b75c9acb2ca883c930191fb7f20422bd2ec48d029a58beec591f00318ce838ed.bin") Found string "kbarnes42@cox.net:brandonsecret" (Indicator: "secret"; Source: "00000000-00002868.00000000.142639.02D40000.00000004.mdmp, 00000000-00002868.00000001.144559.02D40000.00000004.mdmp, 00000000-00002868.00000002.146482.02D40000.00000004.mdmp, 00000000-00002868.00000003.151987.02D40000.00000004.mdmp") Found string "iselapena@sbcglobal.net:password" (Indicator: "password"; Source: "00000000-00002868.00000000.142639.02D40000.00000004.mdmp, 00000000-00002868.00000001.144559.02D40000.00000004.mdmp, 00000000-00002868.00000002.146482.02D40000.00000004.mdmp, 00000000-00002868.00000003.151987.02D40000.00000004.mdmp") Found string "tm_young@sbcglobal.net:password" (Indicator: "password"; Source: "00000000-00002868.00000000.142639.02D40000.00000004.mdmp, 00000000-00002868.00000001.144559.02D40000.00000004.mdmp, 00000000-00002868.00000002.146482.02D40000.00000004.mdmp, 00000000-00002868.00000003.151987.02D40000.00000004.mdmp") Found string "amgarber@cox.net:peachessecret" (Indicator: "secret"; Source: "00000000-00002868.00000000.142639.02D40000.00000004.mdmp, 00000000-00002868.00000001.144559.02D40000.00000004.mdmp, 00000000-00002868.00000002.146482.02D40000.00000004.mdmp, 00000000-00002868.00000003.151987.02D40000.00000004.mdmp") Found string "A piece of advice from me: regularly change all your passwords and update your device with the latest security patches." (Indicator: "password"; Source: "00000000-00002868.00000003.151987.00294000.00000002.mdmp")3a:T9b8,"\" (Indicator: \"CallWindowProc\"; Source: \"00000000-00002868.00000000.142639.02D70000.00000004.mdmp, 00000000-00002868.00000001.144559.02D70000.00000004.mdmp, 00000000-00002868.00000002.146482.02D70000.00000004.mdmp, 00000000-00002868.00000003.151987.02D70000.00000004.mdmp\")","origin":"File/Memory","mitre_attack_id":"T1564.003","relevance":1,"id":"string-320","sources":[{"report_type":"sandbox","report_id":"69fc6a8d5b3c69971c0deca3"}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Observed a high volume of repeated registry API calls (API Hammering)","description":"$27","origin":"Registry Access","mitre_attack_id":"T1497","relevance":7,"id":"registry-215","sources":[{"report_type":"sandbox","report_id":"69fc6a8d5b3c69971c0deca3"}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Queries process information","description":"\"\" (Indicator: \"enumchildwindows\"; Source: \"00000000-00002868.00000000.142639.02D70000.00000004.mdmp, 00000000-00002868.00000001.144559.02D70000.00000004.mdmp, 00000000-00002868.00000002.146482.02D70000.00000004.mdmp, 00000000-00002868.00000003.151987.02D70000.00000004.mdmp\")","origin":"File/Memory","mitre_attack_id":"T1055.015","relevance":1,"id":"string-721","sources":[{"report_type":"sandbox","report_id":"69fc6a8d5b3c69971c0deca3"}]},{"level":"informative","category":"Environment Awareness","name":"Attempts to call APIs commonly associated with anti-analysis and evasion techniques","description":"\" Microsoft\"","origin":"Static Parser","mitre_attack_id":"T1027.002","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"69fc6a8d5b3c69971c0deca3"}]},{"level":"informative","category":"Unusual Characteristics","name":"Reads the windows installation language","description":"\"