24:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/3fc9w1ah_nm2g.js"],"SampleDetailWrapper"] 3c:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T48f,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Mint.Zard.Generic Sample d5171d3dfcfd… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample d5171d3dfcfd…. Malware family: Mint.Zard.Generic. Threat score 100/100. 14/27 AV engines flagged this file. 4 malicious and 16 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/d5171d3dfcfdb37e920e0c9a305ea9a28c419483321ec244a6f2fdfceacb5249","keywords":["Malicious","Mint.Zard.Generic","malware analysis","sandbox report","threat intelligence","d5171d3dfcfdb37e920e0c9a305ea9a28c419483321ec244a6f2fdfceacb5249"],"about":{"@type":"SoftwareApplication","name":"file.exe","applicationCategory":["peexe","executable"],"identifier":"d5171d3dfcfdb37e920e0c9a305ea9a28c419483321ec244a6f2fdfceacb5249","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Mint.Zard.Generic","antivirusDetections":{"malicious":14,"total":27},"behavioralIndicators":{"malicious":4,"suspicious":16},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T856," HTTP/1.1 200 OK Date: Thu 02 Apr 2026 17:48:19 GMT Content-Type: text/plain Content-Length: 14 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET set-cookie: __cf_bm=Yx_d_cE6i.SS2sYTzOPl8yRDkQFib6tDQqzT85gcl4Y-1775152099.6506388-1.0.1.1-wzVprzucI7IN6b0bUEK_lVm7fkEYnROnphQY0fYpBTnSxhtY55xvtrBGCWPeEopsJybBH9E.aHgiGPaxdQO17MtGsfBmfwU8GNtBMGbxEAhTXStyQwsCbUlyQwv6p_8h; HttpOnly; Path=/; Domain=icanhazip.com; Expires=Thu 02 Apr 2026 18:18:19 GMT Server: cloudflare CF-RAY: 9e61a9eede628775-SJC alt-svc: h3=":443"; ma=86400 with response body ==>36342E3132342E31322E3136320A....... "GET /us/n.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/202.0.4664.110 Safari/537.36 Host: 158.94.211.162" Response ==> HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu 02 Apr 2026 17:48:20 GMT Content-Type: text/plain Content-Length: 5 Last-Modified: Tue 31 Mar 2026 19:12:46 GMT Connection: keep-alive ETag: "69cc1cae-5" Accept-Ranges: bytes with response body ==>323534360A....... "GET /us/1296.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/202.0.4664.110 Safari/537.36 Host: 158.94.211.162" Response ==> HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu 02 Apr 2026 17:48:20 GMT Content-Type: text/plain Content-Length: 258202 Last-Modified: Tue 31 Mar 2026 18:30:44 GMT Connection: keep-alive ETag: "69cc12d4-3f09a" Accept-Ranges: bytes with response body ==>30365864210A7363686F72726A756C696131406174742E6E65743A7477696C69676874313631320A696E666F40676573746E6574742E636F6D3A4D4073743872.......2c:T725,"zl+rrrhrrg=+rrr1rr+;0rrqr" - Source: "00000000-00001776.00000000.164272.05649000.00000004.mdmp") Found URL "https://filmyhd.net/pttsarker@yahoo.com:lala040514mccatt1999@cmail.org:maxpaynezx1234ericacanady26@ligcorp.com:sonyat1arturfroeba@web.de:w1hnm1b1lnkzznyjm@xqucanvx.com:w8czlkipe.daccordo@nexidia.it:!nex" - Source: "00000000-00001776.00000001.166197.03590000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00001776.00000001.166197.035E0000.00000004.mdmp") Found URL "http://158.94.211.162/us/ttp://158.94.211.162/us/n.txthttp://158.94.211.162/us/1296.txt0rq^i" - Source: "00000000-00001776.00000001.166197.05649000.00000004.mdmp") Found URL "http://158.94.211.162/us/w>zl+rrrhrrg=+rrr1rr+;0rrqr" - Source: "00000000-00001776.00000001.166197.05649000.00000004.mdmp") Found URL "https://filmyhd.net/pttsarker@yahoo.com:lala040514mccatt1999@cmail.org:maxpaynezx1234ericacanady26@ligcorp.com:sonyat1arturfroeba@web.de:w1hnm1b1lnkzznyjm@xqucanvx.com:w8czlkipe.daccordo@nexidia.it:!nex" - Source: "00000000-00001776.00000001.166197.07AB0000.00000004.mdmp") Found URL "https://filmyhd.net/pttsarker@yahoo.com:lala040514mccatt1999@cmail.org:maxpaynezx1234ericacanady26@ligcorp.com:sonyat1arturfroeba@web.de:w1hnm1b1lnkzznyjm@xqucanvx.com:w8czlkipe.daccordo@nexidia.it:!nex" - Source: "00000000-00001776.00000002.168115.03590000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00001776.00000002.168115.035E0000.00000004.mdmp") Found URL "http://158.94.211.162/us/ttp://158.94.211.162/us/n.txthttp://158.94.211.162/us/1296.txt0rq^i" - Source: "00000000-00001776.00000002.168115.05649000.00000004.mdmp") Found URL "http://158.94.211.162/us/w>zl+rrrhrrg=+rrr1rr+;0rrqr" - Source: "00000000-00001776.00000002.168115.05649000.00000004.mdmp") Found URL "https://filmyhd.net/pttsarker@yahoo.com:lala040514mccatt1999@cmail.org:maxpaynezx1234ericacanady26@ligcorp.com:sonyat1arturfroeba@web.de:w1hnm1b1lnkzznyjm@xqucanvx.com:w8czlkipe.daccordo@nexidia.it:!nex" - Source: "00000000-00001776.00000002.168115.07AB0000.00000004.mdmp") Found URL "https://filmyhd.net/pttsarker@yahoo.com:lala040514mccatt1999@cmail.org:maxpaynezx1234ericacanady26@ligcorp.com:sonyat1arturfroeba@web.de:w1hnm1b1lnkzznyjm@xqucanvx.com:w8czlkipe.daccordo@nexidia.it:!nex" - Source: "00000000-00001776.00000003.173617.03590000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00001776.00000003.173617.035E0000.00000004.mdmp") Found URL "http://158.94.211.162/us/ttp://158.94.211.162/us/n.txthttp://158.94.211.162/us/1296.txt0rq^i" - Source: "00000000-00001776.00000003.173617.05649000.00000004.mdmp") Found URL "http://158.94.211.162/us/w>zl+rrrhrrg=+rrr1rr+;0rrqr" - Source: "00000000-00001776.00000003.173617.05649000.00000004.mdmp")36:T617,Contacted domain: "126mx00.mxmail.netease.com" has high entropy Contacted domain: "163mx01.mxmail.netease.com" has high entropy Contacted domain: "3407be7ee4e82eb6c4d548a93d7a60.pamx1.hotmail.com" has high entropy Contacted domain: "41v1fc.onmicrosoft.com" has high entropy Contacted domain: "aaa0.mx.cloud-mail.jp" has high entropy Contacted domain: "abcnetworkingu.pl" has high entropy Contacted domain: "adsrocketz.com.br" has high entropy Contacted domain: "alt1.aspmx.l.google.com" has high entropy Contacted domain: "alt2.aspmx.l.google.com" has high entropy Contacted domain: "alt3.aspmx.l.google.com" has high entropy Contacted domain: "alt4.aspmx.l.google.com" has high entropy Contacted domain: "architekten-linie4.de" has high entropy Contacted domain: "aspmx3.googlemail.com" has high entropy Contacted domain: "au-smtp-inbound-1.mimecast.com" has high entropy Contacted domain: "b1541.mx.srv.dfn.de" has high entropy Contacted domain: "beautifulblooms.com" has high entropy Contacted domain: "bigpond.net.au" has high entropy Contacted domain: "bluzent1.onmicrosoft.com" has high entropy Contacted domain: "brooklyndancesportclub.com" has high entropy Contacted domain: "centrum-cz-20mx1.eco-mx.cz" has high entropy Contacted domain: "championlegal.net" has high entropy Contacted domain: "chasefreedomactivate.com" has high entropy Contacted domain: "d226001b.ess.barracudanetworks.com" has high entropy Contacted domain: "de-smtp-inbound-1.mimecast.com" has high entropy Contacted domain: "drpayktn.com" has high entropy37:Tac3,Found reference to API "" (Indicator: "GetDC"; Source: "00000000-00001776.00000000.164272.035E0000.00000004.mdmp, 00000000-00001776.00000001.166197.035E0000.00000004.mdmp, 00000000-00001776.00000002.168115.035E0000.00000004.mdmp, 00000000-00001776.00000003.173617.035E0000.00000004.mdmp") Found reference to API "" (Indicator: "GetDC"; Source: "00000000-00001776.00000000.164272.035E0000.00000004.mdmp, 00000000-00001776.00000001.166197.035E0000.00000004.mdmp, 00000000-00001776.00000002.168115.035E0000.00000004.mdmp, 00000000-00001776.00000003.173617.035E0000.00000004.mdmp") Found reference to API "" (Indicator: "GetWindowDC"; Source: "00000000-00001776.00000000.164272.035E0000.00000004.mdmp, 00000000-00001776.00000001.166197.035E0000.00000004.mdmp, 00000000-00001776.00000002.168115.035E0000.00000004.mdmp, 00000000-00001776.00000003.173617.035E0000.00000004.mdmp") Found reference to API "" (Indicator: "CreateDC"; Source: "00000000-00001776.00000000.164272.035E0000.00000004.mdmp, 00000000-00001776.00000001.166197.035E0000.00000004.mdmp, 00000000-00001776.00000002.168115.035E0000.00000004.mdmp, 00000000-00001776.00000003.173617.035E0000.00000004.mdmp") Found reference to API "" (Indicator: "CreateDC"; Source: "00000000-00001776.00000000.164272.035E0000.00000004.mdmp, 00000000-00001776.00000001.166197.035E0000.00000004.mdmp, 00000000-00001776.00000002.168115.035E0000.00000004.mdmp, 00000000-00001776.00000003.173617.035E0000.00000004.mdmp") Found reference to API "" (Indicator: "CreateCompatibleBitmap"; Source: "00000000-00001776.00000000.164272.035E0000.00000004.mdmp, 00000000-00001776.00000001.166197.035E0000.00000004.mdmp, 00000000-00001776.00000002.168115.035E0000.00000004.mdmp, 00000000-00001776.00000003.173617.035E0000.00000004.mdmp") Found reference to API "" (Indicator: "BitBlt"; Source: "00000000-00001776.00000000.164272.035E0000.00000004.mdmp, 00000000-00001776.00000001.166197.035E0000.00000004.mdmp, 00000000-00001776.00000002.168115.035E0000.00000004.mdmp, 00000000-00001776.00000003.173617.035E0000.00000004.mdmp") Found reference to API "" (Indicator: "CreateCompatibleDC"; Source: "00000000-00001776.00000000.164272.035E0000.00000004.mdmp, 00000000-00001776.00000001.166197.035E0000.00000004.mdmp, 00000000-00001776.00000002.168115.035E0000.00000004.mdmp, 00000000-00001776.00000003.173617.035E0000.00000004.mdmp")38:T8da,"\" (Indicator: \"CallWindowProc\"; Source: \"00000000-00001776.00000000.164272.035E0000.00000004.mdmp, 00000000-00001776.00000001.166197.035E0000.00000004.mdmp, 00000000-00001776.00000002.168115.035E0000.00000004.mdmp, 00000000-00001776.00000003.173617.035E0000.00000004.mdmp\")","origin":"File/Memory","mitre_attack_id":"T1564.003","relevance":1,"id":"string-320","sources":[{"report_type":"sandbox","report_id":"69ceabc5842418067b00d787"}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Observed a high volume of repeated registry API calls (API Hammering)","description":"$25","origin":"Registry Access","mitre_attack_id":"T1497","relevance":7,"id":"registry-215","sources":[{"report_type":"sandbox","report_id":"69ceabc5842418067b00d787"}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Queries process information","description":"\"\" (Indicator: \"enumchildwindows\"; Source: \"00000000-00001776.00000000.164272.035E0000.00000004.mdmp, 00000000-00001776.00000001.166197.035E0000.00000004.mdmp, 00000000-00001776.00000002.168115.035E0000.00000004.mdmp, 00000000-00001776.00000003.173617.035E0000.00000004.mdmp\")","origin":"File/Memory","mitre_attack_id":"T1055.015","relevance":1,"id":"string-721","sources":[{"report_type":"sandbox","report_id":"69ceabc5842418067b00d787"}]},{"level":"informative","category":"Environment Awareness","name":"Attempts to call APIs commonly associated with anti-analysis and evasion techniques","description":"\" Microsoft\"","origin":"Static Parser","mitre_attack_id":"T1027.002","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"69ceabc5842418067b00d787"}]},{"level":"informative","category":"Unusual Characteristics","name":"Reads the windows installation language","description":"\"