24:I[10321,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/3h6zdc-it88if.js","/_next/static/chunks/2vw2j18d9u3gs.js","/_next/static/chunks/3l_wb6il5gi_h.js"],"ReportDetailWrapper"] 67:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T51e,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Occamy.C — Falcon Sandbox Report — Score 100/100 — Sample dddf7894b2e6…","description":"Malicious verdict for sandbox report 5e46a2cb3625…. Malware family: Occamy.C. Threat score 100/100. 4 malicious and 16 suspicious behavioral indicators across 42 signatures. Detonated in Windows 7 32 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT\u0026CK mappings.","url":"/sample/dddf7894b2e6aafa1903384759d68455c3a4a8348a7e2da3bd272555eba9bec0/5e46a2cb36253f7e425e0ea4","keywords":["Malicious","Occamy.C","sandbox report","malware analysis","MITRE ATT\u0026CK","dddf7894b2e6aafa1903384759d68455c3a4a8348a7e2da3bd272555eba9bec0"],"about":{"@type":"SoftwareApplication","name":"dddf7894b2e6aafa1903384759d68455c3a4a8348a7e2da3bd272555eba9bec0.bin","applicationCategory":"PE32 executable (GUI) Intel 80386, for MS Windows","identifier":"dddf7894b2e6aafa1903384759d68455c3a4a8348a7e2da3bd272555eba9bec0","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Occamy.C","sandboxEnvironment":"Windows 7 32 bit","behavioralIndicators":{"malicious":4,"suspicious":16,"totalSignatures":42},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T400,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26:T6bd," Microsoft Corporation\"","description_v2":["\"dddf7894b2e6aafa1903384759d68455c3a4a8348a7e2da3bd272555eba9bec0.bin\" was detected as \"VC8 -> Microsoft Corporation\""],"description_v3":[{"type":"text","value":"\"dddf7894b2e6aafa1903384759d68455c3a4a8348a7e2da3bd272555eba9bec0.bin\" was detected as \"VC8 -> Microsoft Corporation\""}],"origin":"Static Parser","attck_id":"T1045","capec_id":"CAPEC-570","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1045","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Anti-Detection/Stealthyness","identifier":"stream-14","type":1,"relevance":8,"name":"Contains ability to open/control a service","description":"OpenServiceA@ADVAPI32.dll at 4106-4621-00401E70","description_v2":["OpenServiceA@ADVAPI32.dll at 4106-4621-00401E70"],"description_v3":[{"type":"text","value":"OpenServiceA@ADVAPI32.dll"},{"type":"stream","stream_uid":"4106-4621-00401E70","modal_link":"/bff/report/5e46a2cb36253f7e425e0ea4/processes/00028233-00002136/streams/0/4106-4621-00401E70","process":null}],"origin":"Hybrid Analysis Technology","attck_id":"T1035","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1035","stream_data":{"modal_link":"/bff/report/5e46a2cb36253f7e425e0ea4/processes/00028233-00002136/streams/0/4106-4621-00401E70","name":"dddf7894b2e6aafa1903384759d68455c3a4a8348a7e2da3bd272555eba9bec0.bin.exe","pid":2136}},{"threat_level":1,"threat_level_human":"suspicious","category":"Anti-Detection/Stealthyness","identifier":"api-9","type":6,"relevance":4,"name":"Queries process information","description":"\" Microsoft Corporation","file_imports":[{"module":"ADVAPI32.dll","functions":["ControlService","OpenSCManagerA","OpenServiceA","RegCloseKey","RegOpenKeyA","RegOpenKeyExA","RegQueryValueExA"]},{"module":"AVIFIL32.dll","functions":["AVIMakeCompressedStream"]},{"module":"COMDLG32.dll","functions":["FindTextW","GetOpenFileNameA"]},{"module":"comsvcs.dll","functions":["CoCreateActivity"]},{"module":"dbghelp.dll","functions":["EnumerateLoadedModules"]},{"module":"GDI32.dll","functions":["BitBlt","ChoosePixelFormat","CreateCompatibleDC","CreateDCA","CreateDIBSection","DeleteDC","DeleteObject","DescribePixelFormat","GetDeviceCaps","GetNearestPaletteIndex","GetPixelFormat","GetTextExtentPoint32A","SelectObject","SetPixelFormat","SetViewportOrgEx","SwapBuffers"]},{"module":"gdiplus.dll","functions":["GdipAlloc","GdipCloneImage","GdipCreateBitmapFromHBITMAP","GdipCreateBitmapFromStream","GdipDisposeImage","GdipFree","GdipSaveImageToStream"]},{"module":"IMM32.dll","functions":["ImmGetContext","ImmReleaseContext","ImmSetCompositionWindow"]},{"module":"KERNEL32.dll","functions":["BuildCommDCBA","CloseHandle","CompareStringW","CreateEventA","CreateEventW","CreateFileA","CreateFileW","CreateThread","DecodePointer","DeleteCriticalSection","EncodePointer","EnterCriticalSection","EnumDateFormatsA","ExitProcess","FindClose","FindFirstFileExA","FindNextFileA","FlushFileBuffers","FreeEnvironmentStringsW","FreeLibrary","GetACP","GetCommandLineA","GetCommandLineW","GetCommState","GetCommTimeouts","GetConsoleCP","GetConsoleMode","GetConsoleWindow","GetCPInfo","GetCurrentProcess","GetCurrentProcessId","GetCurrentThread","GetCurrentThreadId","GetEnvironmentStrings","GetEnvironmentStringsW","GetFileType","GetLastError","GetModuleFileNameA","GetModuleFileNameW","GetModuleHandleA","GetModuleHandleExW","GetModuleHandleW","GetOEMCP","GetPriorityClass","GetProcAddress","GetProcessHeap","GetStartupInfoW","GetStdHandle","GetStringTypeW","GetSystemTimeAsFileTime","GetThreadPriority","GlobalAddAtomA","GlobalAlloc","GlobalFree","GlobalLock","GlobalUnlock","HeapAlloc","HeapFree","HeapReAlloc","HeapSize","InitializeCriticalSectionAndSpinCount","InitializeSListHead","IsDebuggerPresent","IsProcessorFeaturePresent","IsValidCodePage","LCMapStringW","LeaveCriticalSection","LoadLibraryA","LoadLibraryExW","MultiByteToWideChar","OutputDebugStringW","QueryPerformanceCounter","RaiseException","ReadConsoleW","ReadFile","ResetEvent","RtlUnwind","SetCommState","SetCommTimeouts","SetEndOfFile","SetEnvironmentVariableA","SetEvent","SetFilePointerEx","SetLastError","SetPriorityClass","SetStdHandle","SetThreadPriority","SetUnhandledExceptionFilter","TerminateProcess","TlsAlloc","TlsFree","TlsGetValue","TlsSetValue","UnhandledExceptionFilter","WaitForSingleObject","WaitForSingleObjectEx","WideCharToMultiByte","WriteConsoleW","WriteFile"]},{"module":"ODBC32.dll","functions":[]},{"module":"ole32.dll","functions":["CreateStreamOnHGlobal"]},{"module":"OLEAUT32.dll","functions":["CreateTypeLib","CreateTypeLib2"]},{"module":"OPENGL32.dll","functions":["glBegin","glBindTexture","glBitmap","glBlendFunc","glClear","glClearColor","glColor4f","glColor4fv","glColorPointer","glDeleteTextures","glDisable","glDisableClientState","glDrawArrays","glDrawBuffer","glDrawElements","glEnable","glEnableClientState","glEnd","glFlush","glGenTextures","glGetBooleanv","glGetError","glGetFloatv","glGetIntegerv","glGetString","glGetTexEnviv","glLoadIdentity","glMatrixMode","glNormalPointer","glOrtho","glPixelStorei","glPolygonMode","glPopAttrib","glPopClientAttrib","glPopMatrix","glPushAttrib","glPushClientAttrib","glPushMatrix","glRasterPos2i","glReadBuffer","glScissor","glTexCoordPointer","glTexEnvi","glTexImage2D","glTexParameteri","glTranslatef","glVertex2f","glVertex2i","glVertexPointer","glViewport","wglCreateContext","wglDeleteContext","wglGetCurrentContext","wglGetCurrentDC","wglGetProcAddress","wglMakeCurrent"]},{"module":"RPCRT4.dll","functions":["UuidCreate","UuidToStringW"]},{"module":"SHELL32.dll","functions":["DragFinish","DragQueryFileA"]},{"module":"USER32.dll","functions":["AdjustWindowRectEx","BeginPaint","ChangeDisplaySettingsExA","CheckMenuItem","ChildWindowFromPoint","ClientToScreen","CloseClipboard","CopyRect","CreateDialogParamW","CreateWindowExA","DefWindowProcA","DestroyWindow","DialogBoxParamA","DispatchMessageA","DispatchMessageW","EmptyClipboard","EndDialog","EndPaint","EnumDisplayMonitors","EnumDisplaySettingsA","GetClassInfoA","GetClientRect","GetClipboardData","GetCursorPos","GetDC","GetDesktopWindow","GetDlgItem","GetKeyboardState","GetKeyState","GetMessageA","GetMessagePos","GetMessageW","GetMonitorInfoA","GetSystemMetrics","GetUpdateRect","GetWindowLongA","GetWindowRect","InvalidateRect","IsDlgButtonChecked","IsIconic","IsZoomed","LoadCursorA","LoadIconA","MessageBoxA","MonitorFromWindow","MsgWaitForMultipleObjects","OffsetRect","OpenClipboard","PeekMessageA","PostQuitMessage","RegisterClassA","RegisterWindowMessageW","ReleaseCapture","ReleaseDC","ScreenToClient","SendMessageA","SetActiveWindow","SetCapture","SetClassLongA","SetClipboardData","SetCursor","SetCursorPos","SetRect","SetWindowLongA","SetWindowPos","SetWindowTextA","ShowCursor","ShowWindow","ToAscii","TrackMouseEvent","TranslateMessage","UnregisterClassA","UpdateWindow","WindowFromDC","wsprintfA"]},{"module":"WINMM.dll","functions":["joyGetDevCapsA","joyGetPosEx","timeBeginPeriod","timeEndPeriod","timeGetTime"]},{"module":"WS2_32.dll","functions":["closesocket"]}],"osint_tags":[],"osint_references":[],"memory_forensics":[{"value":"http://www.dearimgui.org/faq/","stream_uid":"4106-4152-0045DAA0","stream_modal_data_link":"/bff/report/5e46a2cb36253f7e425e0ea4/processes/00028233-00002136/streams/0/4106-4152-0045DAA0"}],"language":"ENGLISH","authentihash":"ed33fb46f160f561a2403303999bd22ecc07e744df028140fb8cdcf01a95d433","entrypoint_bytes":null,"pdb_timestamp":null,"pdb_pathway":null,"pdb_guid":null,"file_sections":[{"name":".text","entropy":6.58875038839,"virtual_address":"0x1000","virtual_size":"0x8cc3a","raw_size":"0x8ce00","md5":"1ff6aac37235bd6d7a6279c069b59b46","characteristics":[]},{"name":".rdata","entropy":5.6465956287,"virtual_address":"0x8e000","virtual_size":"0x3520c","raw_size":"0x35400","md5":"cb42c9a00982da1d92320a24a269ccdc","characteristics":[]},{"name":".data","entropy":3.34232977603,"virtual_address":"0xc4000","virtual_size":"0x6f188","raw_size":"0x9400","md5":"fa9b0027900111c5821393267baeafd2","characteristics":[]},{"name":".gfids","entropy":2.39597042914,"virtual_address":"0x134000","virtual_size":"0x118","raw_size":"0x200","md5":"75c4a0be56fd5eb62006e0805ad412ba","characteristics":[]},{"name":"_RDATA","entropy":4.4774677296,"virtual_address":"0x135000","virtual_size":"0x7e0","raw_size":"0x800","md5":"db8e2ffab91d2b70dc34c61ece8ea31a","characteristics":[]},{"name":".tls","entropy":0.0203931352361,"virtual_address":"0x136000","virtual_size":"0x9","raw_size":"0x200","md5":"1f354d76203061bfdd5a53dae48d5435","characteristics":[]},{"name":".text","entropy":7.27589653315,"virtual_address":"0x137000","virtual_size":"0x6c6","raw_size":"0x800","md5":"7767f066dd8adc11edbfe85e580485fb","characteristics":[]},{"name":".rsrc","entropy":6.84980030588,"virtual_address":"0x138000","virtual_size":"0x3696c","raw_size":"0x36a00","md5":"ed7d75713747f219a7c4df9a527822b6","characteristics":[]}],"file_exports":[],"error":null,"yara_hits":[],"intelligence_mitre_mappings":[],"entrypoint_preview_count":0,"entrypoint_preview_instructions":[],"file_resources":[{"name":"STYLE","rva":"0x1389a4","size":"0x5185","type":"data","language":"english"},{"name":"STYLE","rva":"0x13db2c","size":"0x5b36","type":"data","language":"english"},{"name":"STYLE","rva":"0x143664","size":"0x5e19","type":"data","language":"english"},{"name":"STYLE","rva":"0x149480","size":"0x5e95","type":"data","language":"english"},{"name":"UIFILE","rva":"0x14f318","size":"0x2a5a","type":"data","language":"english"},{"name":"UIFILE","rva":"0x151d74","size":"0x3add","type":"data","language":"english"},{"name":"WAVE","rva":"0x155854","size":"0x5834","type":"data","language":"english"},{"name":"RT_BITMAP","rva":"0x15b088","size":"0xe0","type":"GLS_BINARY_LSB_FIRST","language":"english"},{"name":"RT_BITMAP","rva":"0x15b168","size":"0xc8","type":"data","language":"english"},{"name":"RT_BITMAP","rva":"0x15b230","size":"0x668","type":"data","language":"english"},{"name":"RT_BITMAP","rva":"0x15b898","size":"0x268","type":"dBase IV DBT, block length 512, next free block index 40, next free block 572654216, next used block 572662306","language":"english"},{"name":"RT_BITMAP","rva":"0x15bb00","size":"0x168","type":"data","language":"english"},{"name":"RT_BITMAP","rva":"0x15bc68","size":"0x2968","type":"data","language":"english"},{"name":"RT_BITMAP","rva":"0x15e5d0","size":"0x668","type":"data","language":"english"},{"name":"RT_BITMAP","rva":"0x15ec38","size":"0x158","type":"data","language":"english"},{"name":"RT_BITMAP","rva":"0x15ed90","size":"0xe0","type":"GLS_BINARY_LSB_FIRST","language":"english"},{"name":"RT_BITMAP","rva":"0x15ee70","size":"0xad2","type":"data","language":"english"},{"name":"RT_ICON","rva":"0x15f944","size":"0x1f1d","type":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","language":"english"},{"name":"RT_ICON","rva":"0x161864","size":"0x468","type":"GLS_BINARY_LSB_FIRST","language":"english"},{"name":"RT_ICON","rva":"0x161ccc","size":"0x25a8","type":"dBase III DBT, version number 0, next free block index 40","language":"english"},{"name":"RT_ICON","rva":"0x164274","size":"0x10a8","type":"dBase III DBT, version number 0, next free block index 40","language":"english"},{"name":"RT_ICON","rva":"0x16531c","size":"0x2868","type":"dBase IV DBT, blocks size 0, block length 10240, next free block index 40, next free block 0, next used block 0","language":"english"},{"name":"RT_ICON","rva":"0x167b84","size":"0x4228","type":"dBase III DBT, version number 0, next free block index 40","language":"english"},{"name":"RT_MENU","rva":"0x16bdac","size":"0x358","type":"data","language":"english"},{"name":"RT_MENU","rva":"0x16c104","size":"0x222","type":"data","language":"english"},{"name":"RT_MENU","rva":"0x16c328","size":"0x7c","type":"data","language":"english"},{"name":"RT_MENU","rva":"0x16c3a4","size":"0xffa","type":"data","language":"english"},{"name":"RT_MENU","rva":"0x16d3a0","size":"0x40","type":"data","language":"english"},{"name":"RT_STRING","rva":"0x16d3e0","size":"0x184","type":"data","language":"english"},{"name":"RT_STRING","rva":"0x16d564","size":"0x1dc","type":"data","language":"english"},{"name":"RT_STRING","rva":"0x16d740","size":"0xd0","type":"data","language":"english"},{"name":"RT_STRING","rva":"0x16d810","size":"0x17c","type":"data","language":"english"},{"name":"RT_STRING","rva":"0x16d98c","size":"0x106","type":"data","language":"english"},{"name":"RT_STRING","rva":"0x16da94","size":"0x260","type":"data","language":"english"},{"name":"RT_STRING","rva":"0x16dcf4","size":"0x1b8","type":"Hitachi SH big-endian COFF object, not stripped","language":"english"},{"name":"RT_STRING","rva":"0x16deac","size":"0x176","type":"data","language":"english"},{"name":"RT_STRING","rva":"0x16e024","size":"0x48","type":"data","language":"english"},{"name":"RT_STRING","rva":"0x16e06c","size":"0x2c","type":"data","language":"english"},{"name":"RT_STRING","rva":"0x16e098","size":"0x120","type":"data","language":"english"},{"name":"RT_GROUP_ICON","rva":"0x16e1b8","size":"0x5a","type":"MS Windows icon resource - 6 icons, 256x256","language":"english"},{"name":"RT_VERSION","rva":"0x16e214","size":"0x344","type":"data","language":"english"},{"name":"RT_MANIFEST","rva":"0x16e558","size":"0x414","type":"XML 1.0 document, ASCII text, with CRLF line terminators","language":"english"}],"file_permissions":[],"file_activities":[],"file_receivers":[],"file_data_directories":[],"elf_headers":[],"elf_static_symbols":null,"vba_macros":[],"verdict_source":null,"user_comments":[{"_id":"5e988477d8def722f5533bb1","content":"#Dharma","user":{"_id":"570be6bfaac2edfb1e7b23c6","name":"GrujaRS"},"created_at":"2020-02-14T22:12:13+00:00"},{"_id":"615e0f7ee2b4bf729a4eebad","content":"#malware #ransomware","user":null,"created_at":"2021-10-06T21:05:02+00:00"},{"_id":"66a1428bf47b50748d017a93","content":"l","user":null,"created_at":"2024-07-24T18:06:03+00:00"},{"_id":"66a15702313b4b8d160792ca","content":"Hala madrid","user":null,"created_at":"2024-07-24T19:33:22+00:00"},{"_id":"66a1581e2a21eb48420a5b97","content":"Investigacion","user":null,"created_at":"2024-07-24T19:38:06+00:00"},{"_id":"66a15cdbdde49618080e75da","content":"hala madrid","user":null,"created_at":"2024-07-24T19:58:19+00:00"}],"email_headers":null,"classification_tags":["evasive","ransomware"],"tags":["Dharma","malware","ransomware","evasive"],"submissions":[{"submission_id":"5f844f1df54d302acf250fbb","filename":"29x92B.exe","url":null,"created_at":"2020-10-12T12:42:05+00:00"},{"submission_id":"5e46a2cb36253f7e425e0ea3","filename":"dddf7894b2e6aafa1903384759d68455c3a4a8348a7e2da3bd272555eba9bec0.bin","url":null,"created_at":"2020-02-14T13:38:19+00:00"}],"crowdstrike_ai":{"executable_process_memory_analysis":[],"analysis_related_urls":[]},"warnings":["Not all sources for indicator ID \"api-55\" are available in the report"],"report_related_files":{"report_json":{"file_name":"report.json","download_url":"/bff/report/5e46a2cb36253f7e425e0ea4/download/files/report_json","file_size":729621},"memory_strings":{"file_name":"mstrings.zip","download_url":"/bff/report/5e46a2cb36253f7e425e0ea4/download/files/memory_strings","file_size":2383},"certificate":null,"network_pcap":{"file_name":"network.pcap","download_url":"/bff/report/5e46a2cb36253f7e425e0ea4/download/files/network_pcap","file_size":21164},"memory_dumps":null},"system_resource_monitor":{"cpu_usage":[{"x":0,"y":52.8412},{"x":1,"y":99.0017},{"x":2,"y":99.0629},{"x":3,"y":74.8074},{"x":4,"y":81.3445},{"x":5,"y":71.9914},{"x":6,"y":78.016},{"x":7,"y":91.0174},{"x":8,"y":92.2747},{"x":9,"y":91.7977},{"x":10,"y":92.9756}],"memory_usage":[{"x":0,"y":14.8592},{"x":1,"y":17.2652},{"x":2,"y":17.6905},{"x":3,"y":18.0089},{"x":4,"y":21.5485},{"x":5,"y":21.6557},{"x":6,"y":22.0078},{"x":7,"y":21.9733},{"x":8,"y":21.9821},{"x":9,"y":22.1178},{"x":10,"y":22.1118}],"disk_read":[{"x":0,"y":6096520},{"x":1,"y":22489900},{"x":2,"y":6785600},{"x":3,"y":9495050},{"x":4,"y":17622800},{"x":5,"y":29169200},{"x":6,"y":18379600},{"x":7,"y":4709550},{"x":8,"y":21509600},{"x":9,"y":18167800},{"x":10,"y":19276000}],"disk_write":[{"x":0,"y":6679340},{"x":1,"y":33221400},{"x":2,"y":18723100},{"x":3,"y":23571200},{"x":4,"y":44373700},{"x":5,"y":54582100},{"x":6,"y":43508100},{"x":7,"y":28594300},{"x":8,"y":42542400},{"x":9,"y":31706800},{"x":10,"y":39285800}],"network_packets":[{"x":0,"y":24.2463},{"x":1,"y":23.3043},{"x":2,"y":25.1061},{"x":3,"y":25.2414},{"x":4,"y":16.9799},{"x":5,"y":9.13016},{"x":6,"y":13.4405},{"x":7,"y":12.4276},{"x":8,"y":4.77381},{"x":9,"y":20.8857},{"x":10,"y":20.8187}],"page_file":[{"x":0,"y":295334000},{"x":1,"y":301666000},{"x":2,"y":297677000},{"x":3,"y":295776000},{"x":4,"y":291938000},{"x":5,"y":294978000},{"x":6,"y":295113000},{"x":7,"y":293921000},{"x":8,"y":293237000},{"x":9,"y":293450000},{"x":10,"y":293261000}]},"external_reports":null,"available_buttons":{"report_false_positive":true},"hashes_to_context_check":["dddf7894b2e6aafa1903384759d68455c3a4a8348a7e2da3bd272555eba9bec0","17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","efc11f8fcdd0a8649ebee758b105db10536e895ea6d586a07b61f68b1e5dbd20","e09bf4d27555ec7567a598ba89ccc33667252cef1fb0b604315ea7562d18ad10"]}}]]}] 1e:null 22:[["$","title","0",{"children":"Malicious Occamy.C — Falcon Sandbox Report — Score 100/100 — Sample dddf7894b2e6… | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sandbox report 5e46a2cb3625…. Malware family: Occamy.C. Threat score 100/100. 4 malicious and 16 suspicious behavioral indicators across 42 signatures. Detonated in Windows 7 32 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/dddf7894b2e6aafa1903384759d68455c3a4a8348a7e2da3bd272555eba9bec0/5e46a2cb36253f7e425e0ea4"}],["$","meta","4",{"property":"og:title","content":"Malicious Occamy.C — Falcon Sandbox Report — Score 100/100 — Sample dddf7894b2e6… | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sandbox report 5e46a2cb3625…. Malware family: Occamy.C. Threat score 100/100. 4 malicious and 16 suspicious behavioral indicators across 42 signatures. Detonated in Windows 7 32 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/dddf7894b2e6aafa1903384759d68455c3a4a8348a7e2da3bd272555eba9bec0/5e46a2cb36253f7e425e0ea4"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Occamy.C — Falcon Sandbox Report — Score 100/100 — Sample dddf7894b2e6… | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sandbox report 5e46a2cb3625…. Malware family: Occamy.C. Threat score 100/100. 4 malicious and 16 suspicious behavioral indicators across 42 signatures. Detonated in Windows 7 32 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L67","11",{}]]