24:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/3fc9w1ah_nm2g.js"],"SampleDetailWrapper"] 32:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T4d7,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Shellcode.Loader.Marte.X.Generic Sample dd39ea7f1b04… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample dd39ea7f1b04…. Malware family: Shellcode.Loader.Marte.X.Generic. Threat score 100/100. 17/28 AV engines flagged this file. 4 malicious and 6 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/dd39ea7f1b04393f672dff7ec34678c708949f6dfa388591c92bfee1f1696f88","keywords":["Malicious","Shellcode.Loader.Marte.X.Generic","malware analysis","sandbox report","threat intelligence","dd39ea7f1b04393f672dff7ec34678c708949f6dfa388591c92bfee1f1696f88"],"about":{"@type":"SoftwareApplication","name":"build_x64.exe","applicationCategory":["peexe","64bits","executable"],"identifier":"dd39ea7f1b04393f672dff7ec34678c708949f6dfa388591c92bfee1f1696f88","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Shellcode.Loader.Marte.X.Generic","antivirusDetections":{"malicious":17,"total":28},"behavioralIndicators":{"malicious":4,"suspicious":6},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T418,Found string "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/" (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+"; File: "dd39ea7f1b04393f672dff7ec34678c708949f6dfa388591c92bfee1f1696f88.bin") Found string "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/" (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; File: "dd39ea7f1b04393f672dff7ec34678c708949f6dfa388591c92bfee1f1696f88.bin") Found string "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/" (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+"; Source: "00000000-00005560.00000000.160179.5050E000.00000002.mdmp, 00000000-00005560.00000000.160179.C65D0000.00000004.mdmp") Found string "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/" (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; Source: "00000000-00005560.00000000.160179.5050E000.00000002.mdmp, 00000000-00005560.00000000.160179.C65D0000.00000004.mdmp")26:Tb73,Assembly shows XOR instruction xor dil 01h in Stream UID: 64250-627-0000000140027EA8 Assembly shows XOR instruction xor bh 01h in Stream UID: 64250-627-0000000140027EA8 Assembly shows XOR instruction xor rcx rsp in Stream UID: 64250-2661-00000001400413DC Assembly shows XOR instruction xor ecx esp in Stream UID: 64250-2661-00000001400413DC Assembly shows XOR instruction xor rcx rsp in Stream UID: 64250-2663-00000001400414E0 Assembly shows XOR instruction xor ecx esp in Stream UID: 64250-2663-00000001400414E0 Assembly shows XOR instruction xor rax rsp in Stream UID: 64250-2694-000000014004353E Assembly shows XOR instruction xor eax esp in Stream UID: 64250-2694-000000014004353E Assembly shows XOR instruction xor rcx rsp in Stream UID: 64250-2694-000000014004353E Assembly shows XOR instruction xor ecx esp in Stream UID: 64250-2694-000000014004353E Assembly shows XOR instruction xor rcx rsp in Stream UID: 64250-2940-000000014005492B Assembly shows XOR instruction xor ecx esp in Stream UID: 64250-2940-000000014005492B Assembly shows XOR instruction xor rax rsp in Stream UID: 64250-2941-00000001400612BC Assembly shows XOR instruction xor eax esp in Stream UID: 64250-2941-00000001400612BC Assembly shows XOR instruction xor rcx rsp in Stream UID: 64250-2941-00000001400612BC Assembly shows XOR instruction xor ecx esp in Stream UID: 64250-2941-00000001400612BC Assembly shows XOR instruction xor edi dword ptr [rcx] in Stream UID: 64250-3029-000000014005C61D Assembly shows XOR instruction xor dword ptr [rcx] edi in Stream UID: 64250-3029-000000014005C61D Assembly shows XOR instruction xor rcx rsp in Stream UID: 64250-3103-000000014006202B Assembly shows XOR instruction xor ecx esp in Stream UID: 64250-3103-000000014006202B Assembly shows XOR instruction xor rcx rsp in Stream UID: 64250-3157-0000000140065D7D Assembly shows XOR instruction xor ecx esp in Stream UID: 64250-3157-0000000140065D7D Assembly shows XOR instruction xor rcx rsp in Stream UID: 64250-3161-0000000140065FBD Assembly shows XOR instruction xor ecx esp in Stream UID: 64250-3161-0000000140065FBD Assembly shows XOR instruction xor qword ptr [rbp-10h] rax in Stream UID: 64250-4035-0000000140040729 Assembly shows XOR instruction xor dword ptr [rbp-10h] eax in Stream UID: 64250-4035-0000000140040729 Assembly shows XOR instruction xor rax qword ptr [rbp+18h] in Stream UID: 64250-4035-0000000140040729 Assembly shows XOR instruction xor eax dword ptr [rbp+18h] in Stream UID: 64250-4035-0000000140040729 Assembly shows XOR instruction xor rax qword ptr [rbp-10h] in Stream UID: 64250-4035-0000000140040729 Assembly shows XOR instruction xor eax dword ptr [rbp-10h] in Stream UID: 64250-4035-0000000140040729 Assembly shows XOR instruction xor rax rcx in Stream UID: 64250-4035-0000000140040729 Assembly shows XOR instruction xor eax ecx in Stream UID: 64250-4035-000000014004072927:T712,Found reference to API "GetLocaleInfoEx" (Indicator: "GetLocaleInfo"; File: "dd39ea7f1b04393f672dff7ec34678c708949f6dfa388591c92bfee1f1696f88.bin") Found reference to API "GetLocaleInfoW" (Indicator: "GetLocaleInfo"; File: "dd39ea7f1b04393f672dff7ec34678c708949f6dfa388591c92bfee1f1696f88.bin") Found reference to API "GetUserDefaultLCID" (Indicator: "GetUserDefaultLCID"; File: "dd39ea7f1b04393f672dff7ec34678c708949f6dfa388591c92bfee1f1696f88.bin") Found reference to API "EnumSystemLocalesW" (Indicator: "EnumSystemLocales"; File: "dd39ea7f1b04393f672dff7ec34678c708949f6dfa388591c92bfee1f1696f88.bin") Found reference to API "EnumSystemLocalesEx" (Indicator: "EnumSystemLocales"; File: "dd39ea7f1b04393f672dff7ec34678c708949f6dfa388591c92bfee1f1696f88.bin") Found reference to API "GetUserDefaultLocaleName" (Indicator: "GetUserDefaultLocaleName"; File: "dd39ea7f1b04393f672dff7ec34678c708949f6dfa388591c92bfee1f1696f88.bin") Found reference to API "EnumSystemLocalesEx" (Indicator: "EnumSystemLocales"; Source: "00000000-00005560.00000000.160179.5050E000.00000002.mdmp") Found reference to API "GetLocaleInfoEx" (Indicator: "GetLocaleInfo"; Source: "00000000-00005560.00000000.160179.5050E000.00000002.mdmp") Found reference to API "GetUserDefaultLocaleName" (Indicator: "GetUserDefaultLocaleName"; Source: "00000000-00005560.00000000.160179.5050E000.00000002.mdmp") Found reference to API "GetLocaleInfoW" (Indicator: "GetLocaleInfo"; Source: "00000000-00005560.00000000.160179.5050E000.00000002.mdmp") Found reference to API "GetUserDefaultLCID" (Indicator: "GetUserDefaultLCID"; Source: "00000000-00005560.00000000.160179.5050E000.00000002.mdmp") Found reference to API "EnumSystemLocalesW" (Indicator: "EnumSystemLocales"; Source: "00000000-00005560.00000000.160179.5050E000.00000002.mdmp")28:T4f8,"