34:"SampleDetailWrapper" 35:I[7638,["$1","$2","$3","$4","$5","$8","$9","$a","$b"],"$34"] 38:I[27201,["$1","$2","$3","$4","$5"],"IconMark"] 33:T4fa,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Win/malicious_confidence_60% Sample d627574c5ebb… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample d627574c5ebb…. Malware family: Win/malicious_confidence_60%. Threat score 100/100. 6/27 AV engines flagged this file. 1 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/d627574c5ebb9f416fbc56a822ce56242c7213939356171645f96b3efa9fd6d0","keywords":["Malicious","Win/malicious_confidence_60%","malware analysis","sandbox report","threat intelligence","d627574c5ebb9f416fbc56a822ce56242c7213939356171645f96b3efa9fd6d0"],"about":{"@type":"SoftwareApplication","name":"d627574c5ebb9f416fbc56a822ce56242c7213939356171645f96b3efa9fd6d0","applicationCategory":["peexe","assembly","executable"],"identifier":"d627574c5ebb9f416fbc56a822ce56242c7213939356171645f96b3efa9fd6d0","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Win/malicious_confidence_60%","antivirusDetections":{"malicious":6,"total":27},"behavioralIndicators":{"malicious":1,"suspicious":0},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}36:Ta8f,Found reference to API "bindingNavigatorAddNewItem.Image" (Indicator: "bind"; Source: "sample.bin"), Found reference to API "Inteenum" (Indicator: "tee"; Source: "sample.bin"), Found reference to API "bindingNavigatorMoveLastItem2.Image" (Indicator: "bind"; Source: "sample.bin"), file/memory contains long string with (Indicator: "connect"; Source: "sample.bin"), file/memory contains long string with (Indicator: "mount"; Source: "sample.bin"), file/memory contains long string with (Indicator: "read"; Source: "sample.bin"), file/memory contains long string with (Indicator: "stat"; Source: "sample.bin"), Found reference to API "tEXtCreation Time" (Indicator: "creat"; Source: "sample.bin"), Found reference to API "tEXtCreation Time" (Indicator: "time"; Source: "sample.bin"), file/memory contains long string with (Indicator: "open"; Source: "sample.bin"), Found reference to API "bindingNavigatorMoveLastItem.Image" (Indicator: "bind"; Source: "sample.bin"), file/memory contains long string with (Indicator: "creat"; Source: "sample.bin"), file/memory contains long string with (Indicator: "kill"; Source: "sample.bin"), Found reference to API "bindingNavigatorDeleteItem1.Image" (Indicator: "bind"; Source: "sample.bin"), file/memory contains long string with (Indicator: "fork"; Source: "sample.bin"), Found reference to API "bindingNavigatorMoveNextItem1.Image" (Indicator: "bind"; Source: "sample.bin"), Found reference to API "hyperlink" (Indicator: "link"; Source: "sample.bin"), Found reference to API "lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet" (Indicator: "read"; Source: "sample.bin"), Found reference to API "lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet" (Indicator: "time"; Source: "sample.bin"), Found reference to API "bindingNavigatorMovePreviousItem2.Image" (Indicator: "bind"; Source: "sample.bin"), Found reference to API "bindingNavigatorAddNewItem2.Image" (Indicator: "bind"; Source: "sample.bin"), Found reference to API "bindingNavigatorMoveFirstItem1.Image" (Indicator: "bind"; Source: "sample.bin"), Found reference to API "bindingNavigatorMovePreviousItem.Image" (Indicator: "bind"; Source: "sample.bin"), Found reference to API "axWebBrowser1.OcxState" (Indicator: "stat"; Source: "sample.bin"), Found reference to API "!System.Windows.Forms.AxHost+State" (Indicator: "stat"; Source: "sample.bin"), Found reference to API "printSixteenBitbool" (Indicator: "tee"; Source: "sample.bin"), file/memory contains long string with (Indicator: "brk"; Source: "sample.bin")37:T42d,Observed string: "Island" url="isp/0" id="148"/>