26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 5f:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T48e,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Remcos.Generic Sample e29a9375ec13… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample e29a9375ec13…. Malware family: Remcos.Generic. Threat score 100/100. 12/28 AV engines flagged this file. 14 malicious and 12 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110","keywords":["Malicious","Remcos.Generic","malware analysis","sandbox report","threat intelligence","e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110"],"about":{"@type":"SoftwareApplication","name":"file.exe","applicationCategory":["peexe","64bits","executable"],"identifier":"e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Remcos.Generic","antivirusDetections":{"malicious":12,"total":28},"behavioralIndicators":{"malicious":14,"suspicious":12},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:Tb72,Found reference to API "WriteProcessMemory" (Indicator: "WriteProcessMemory"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "VirtualFree" (Indicator: "VirtualFree"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "VirtualAlloc" (Indicator: "VirtualAlloc"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "CreateThread" (Indicator: "CreateThread"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "CreateThreadpoolTimer" (Indicator: "CreateThread"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "CreateThreadpoolWait" (Indicator: "CreateThread"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "CreateThreadpoolWork" (Indicator: "CreateThread"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "NtAllocateVirtualMemory" (Indicator: "AllocateVirtualMemory"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "WTSFreeMemory" (Indicator: "FreeMemory"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "NtMapViewOfSection" (Indicator: "NtMapViewOfSection"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "CreateThreadpoolTimer" (Indicator: "CreateThread"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "CreateThreadpoolWait" (Indicator: "CreateThread"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "CreateThreadpoolWork" (Indicator: "CreateThread"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "NtAllocateVirtualMemory" (Indicator: "AllocateVirtualMemory"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "WTSFreeMemory" (Indicator: "FreeMemory"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "NtMapViewOfSection" (Indicator: "NtMapViewOfSection"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "CreateThread" (Indicator: "CreateThread"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "VirtualFree" (Indicator: "VirtualFree"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "VirtualAlloc" (Indicator: "VirtualAlloc"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "WriteProcessMemory" (Indicator: "WriteProcessMemory"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp")28:T5ca,Found reference to API "Wow64SetThreadContext" (Indicator: "SetThreadContext"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "Wow64GetThreadContext" (Indicator: "GetThreadContext"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "ResumeThread" (Indicator: "ResumeThread"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "GetThreadContext" (Indicator: "GetThreadContext"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "SetThreadContext" (Indicator: "SetThreadContext"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "Wow64SetThreadContext" (Indicator: "SetThreadContext"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "Wow64GetThreadContext" (Indicator: "GetThreadContext"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "GetThreadContext" (Indicator: "GetThreadContext"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "SetThreadContext" (Indicator: "SetThreadContext"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "ResumeThread" (Indicator: "ResumeThread"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp")29:T9d4,Found reference to API "WaitForSingleObjectEx" (Indicator: "WaitForSingleObject"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "WaitForSingleObjectEx" (Indicator: "WaitForSingleObjectEx"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "QueryPerformanceCounter" (Indicator: "QueryPerformanceCounter"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTimeAsFileTime"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "QueryPerformanceFrequency" (Indicator: "QueryPerformanceFrequency"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "WaitForSingleObject" (Indicator: "WaitForSingleObject"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "GetTickCount64" (Indicator: "GetTickCount64"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "GetTickCount64" (Indicator: "GetTickCount64"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "WaitForSingleObject" (Indicator: "WaitForSingleObject"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "QueryPerformanceFrequency" (Indicator: "QueryPerformanceFrequency"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "QueryPerformanceCounter" (Indicator: "QueryPerformanceCounter"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "WaitForSingleObjectEx" (Indicator: "WaitForSingleObject"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "WaitForSingleObjectEx" (Indicator: "WaitForSingleObjectEx"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTimeAsFileTime"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "QueryPerformanceCounter" (Indicator: "QueryPerformanceCounter"; Source: "00000000-00007980.00000000.241264.2409F000.00000002.mdmp") Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTimeAsFileTime"; Source: "00000000-00007980.00000000.241264.2409F000.00000002.mdmp")2a:T592,Found reference to API "LoadLibraryExW" (Indicator: "LoadLibrary"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "LoadLibraryW" (Indicator: "LoadLibrary"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "FreeLibrary" (Indicator: "FreeLibrary"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "LoadLibraryA" (Indicator: "LoadLibrary"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "FreeLibraryWhenCallbackReturns" (Indicator: "FreeLibrary"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "FreeLibraryWhenCallbackReturns" (Indicator: "FreeLibrary"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "LoadLibraryA" (Indicator: "LoadLibrary"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "FreeLibrary" (Indicator: "FreeLibrary"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "LoadLibraryW" (Indicator: "LoadLibrary"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "LoadLibraryExW" (Indicator: "LoadLibrary"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp")2b:T4d7,Found reference to API "RegSetValueExW" (Indicator: "RegSetValue"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "RegSetValueExA" (Indicator: "RegSetValue"; File: "e29a9375ec13c8a7df64cdf4743fb77d4a3e651550269bf0942143adf42fa110.bin") Found reference to API "RegSetValueExA" (Indicator: "RegSetValue"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "RegSetValueExW" (Indicator: "RegSetValue"; Source: "00000000-00005508.00000001.243014.40070000.00000002.mdmp") Found reference to API "RegSetValueExW" (Indicator: "RegSetValue"; Source: "00000000-00007980.00000000.241264.2409F000.00000002.mdmp") Found reference to API "RegRestoreKeyW" (Indicator: "RegRestoreKey"; Source: "00000000-00007980.00000000.241264.2409F000.00000002.mdmp") Found reference to API "RegSetValueExA" (Indicator: "RegSetValue"; Source: "00000000-00007980.00000000.241264.2409F000.00000002.mdmp") Found reference to API "RegFlushKey" (Indicator: "RegFlushKey"; Source: "00000000-00007980.00000000.241264.2409F000.00000002.mdmp") Found reference to API "RegSetValueW" (Indicator: "RegSetValue"; Source: "00000000-00007980.00000000.241264.2409F000.00000002.mdmp")2c:T995,"