Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    mantica 8.4.4.exe

  • Size

    53.3MB

  • Sample

    240701-yzhjysxbra

  • MD5

    1a9b3d964cf0ff58923aa13bde9560e8

  • SHA1

    e52cc7da921418d4d3481cdcb1b3e4b8452d2cb0

  • SHA256

    56aea47f3be4b5db06d1dfcd20b44ac119312aed1151124087aee63fa78a7133

  • SHA512

    64811e46e13c9872c24e3a9dec96952608bd8e7d022a72b614d1b7bd36175193440bda830de4eaabfdca8ac29ec4c1b11fe6c6b009e42fcbe2d02ace576a012a

  • SSDEEP

    1572864:g1rYBmKt3e45LIOoiPdrdBI82eRSJ/7piVQ3L:gZYPt0ORdrdBI82eqzkVQ7

Score
7/10

Malware Config

Targets

    • Target

      mantica 8.4.4.exe

    • Size

      53.3MB

    • MD5

      1a9b3d964cf0ff58923aa13bde9560e8

    • SHA1

      e52cc7da921418d4d3481cdcb1b3e4b8452d2cb0

    • SHA256

      56aea47f3be4b5db06d1dfcd20b44ac119312aed1151124087aee63fa78a7133

    • SHA512

      64811e46e13c9872c24e3a9dec96952608bd8e7d022a72b614d1b7bd36175193440bda830de4eaabfdca8ac29ec4c1b11fe6c6b009e42fcbe2d02ace576a012a

    • SSDEEP

      1572864:g1rYBmKt3e45LIOoiPdrdBI82eRSJ/7piVQ3L:gZYPt0ORdrdBI82eqzkVQ7

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Target

      $PLUGINSDIR/StdUtils.dll

    • Size

      101KB

    • MD5

      33b4e69e7835e18b9437623367dd1787

    • SHA1

      53afa03edaf931abdc2d828e5a2c89ad573d926c

    • SHA256

      72d38ef115e71fc73dc5978987c583fc8c6b50ff12e4a5d30649a4d164a8b6ae

    • SHA512

      ca890e785d1a0a7e0b4a748416fba417826ae66b46e600f407d4e795b444612a8b830f579f2cf5b6e051bea800604f34f8801cc3daf05c8d29ad05bcda454a77

    • SSDEEP

      1536:Ayy+wx2YAlWrU5OX9crt5c4DBqiC7hk333kbQk:ry+wojIwgNcr1a7WH0b

    Score
    3/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      75ed96254fbf894e42058062b4b4f0d1

    • SHA1

      996503f1383b49021eb3427bc28d13b5bbd11977

    • SHA256

      a632d74332b3f08f834c732a103dafeb09a540823a2217ca7f49159755e8f1d7

    • SHA512

      58174896db81d481947b8745dafe3a02c150f3938bb4543256e8cce1145154e016d481df9fe68dac6d48407c62cbe20753320ebd5fe5e84806d07ce78e0eb0c4

    • SSDEEP

      192:X24sihno0bW+l97H4GB7QDs91kMtwtobTr4u+QHbazMNHT7dmNIEr:m8vJl97JeoxtN/r3z7YV

    Score
    3/10
    • Target

      LICENSES.chromium.html

    • Size

      4.5MB

    • MD5

      d4a79b5d46f0931b9eb7125fd40baff0

    • SHA1

      3a38fb263dde2251b9fe157b5fddec7acb07c53e

    • SHA256

      03f1d245e6a2facca9edbdaad108169e0765dd9101875bc2d123797994b9e80f

    • SHA512

      17cf94805f11d499ff12d8e42cb262ceecbeb265f56338e0837d291f6a7ed7f8135a025dbe99fdb2e2bb299f2267bed9365976ea51269aafd4c3220cffef9339

    • SSDEEP

      24576:thgBBmnLiLArZ62BrcrnKHq/kUkBAwi9QxruE:rYBmLAehN6KK+xV

    Score
    1/10
    • Target

      d3dcompiler_47.dll

    • Size

      4.3MB

    • MD5

      7641e39b7da4077084d2afe7c31032e0

    • SHA1

      2256644f69435ff2fee76deb04d918083960d1eb

    • SHA256

      44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47

    • SHA512

      8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5

    • SSDEEP

      49152:aYlc/220PPiMLKam+VMrLi21f4i3jn5ZO3XUDmOZQwVd2uQpN3WsGVUWd55i/jrs:a6KD2Mrdaix4NQnLt

    Score
    1/10
    • Target

      ffmpeg.dll

    • Size

      2.7MB

    • MD5

      eabfc10d56cb44a86493cb2f8ca7aab2

    • SHA1

      09d7e87f43527333cd021329d6c2f4e8bd8ddab5

    • SHA256

      42a2a996ac433ac33a22776b8418a82753557093d90147b7951138b5c83924b6

    • SHA512

      ee31e3539fba9e5969a9f38c428f586de2dd7630cb5d8c5e3c2c934b5881f8176b8ab6ef6397c1ce4fa6ccf3ee9615225c7afa0e0b28c6fc23974e8b96625dec

    • SSDEEP

      49152:YISWBURglcWlJUQSyPV3cZ8RxDZa+DmXfUStDw/JcImohiiMoFwEgy:YPnvdZoJpMoQ

    Score
    1/10
    • Target

      libEGL.dll

    • Size

      438KB

    • MD5

      660a9ae1282e6205fc0a51e64470eb5b

    • SHA1

      f91a9c9559f51a8f33a552f0145ed9e706909de8

    • SHA256

      f2a841b6ef320f226965c7cb01fbc4709fc31425e490a3edfa20147ce3656c85

    • SHA512

      20bed2bed042033e3d8b077f9d66bce67922aaec180cc3777f20560219226b7efc73932bb87445afda4e3877472ddcd307215d23954cd082051437e5f2224263

    • SSDEEP

      6144:79h+56bG/eyllh9g1Kajo9wEVzZJAWpf4IBL75+Hjr:79Jbwla1KoAwqf4I4v

    Score
    1/10
    • Target

      libGLESv2.dll

    • Size

      7.3MB

    • MD5

      bc45db0195aa369cc3c572e4e9eefc7e

    • SHA1

      b880ca4933656be52f027028af5ef8a3b7e07e97

    • SHA256

      a81729fd6ee2d64dfc47501a1d53794cdeee5c1daa3751f7554aea2503686d10

    • SHA512

      dd8c39947e7d767fbdccf90c5b3eaedf3937b43c55200d2199107333b63ac09e5356c286618874fac841e1357dd927e0c70b5066c1feeedd8cc6c0fba605ee5f

    • SSDEEP

      98304:txhV5ahd7dNgHB1g468F4p9+7ULjSLy+W:tDVEhd7dcFE9+kSLx

    Score
    1/10
    • Target

      mantica.exe

    • Size

      120.5MB

    • MD5

      6a2a25023de3242285ca663442c6f93a

    • SHA1

      8bbe4d462e7f9aac5f61c01404192739f8acb0a6

    • SHA256

      21bcba0401952cf27b324a8449fc75b8222aa8030e5af7441d72ecc26b764c73

    • SHA512

      3eaa468973a36f99b68522096e71d4084d858add60ee4a46a793b5016eadb312b9d2a6bd4f90a7fc2368f12cfb1554d6f9a92aa5c7ec755661d7b4f8bfe8f4e6

    • SSDEEP

      1572864:s1f0+Sva7Hdp1Nhn+aCdrvdYrZ/7/lbg8udR8SnuSE49z:pasulbg8yTnbEOz

    Score
    7/10
    • Loads dropped DLL

    • Target

      resources/app.asar

    • Size

      11.0MB

    • MD5

      07decfd19c1e3c20d987a4e2168171cf

    • SHA1

      17202440bf81208e75f456a85727717ffaa25dee

    • SHA256

      bc45eb66416f95e7bd8e9db1e4046949c1ff78f264ab6d808b38a861c5930456

    • SHA512

      7541c521b23562443120fd5a721c4633bf3cae2cd43f9c6e3aa8ad077ce6b80f510f8f93f65ca5dab6ee6248fe7ccd6c328f1557ace007ef0e2adbbff378fa70

    • SSDEEP

      98304:vAohCTOi8sQrZwwpxTbG9tIagImnkiold7GfbJLljZF+3J0gWuXYRM84aKUx:vAfB91gImMMxlY3Cg51lUx

    Score
    3/10
    • Target

      resources/elevate.exe

    • Size

      105KB

    • MD5

      792b92c8ad13c46f27c7ced0810694df

    • SHA1

      d8d449b92de20a57df722df46435ba4553ecc802

    • SHA256

      9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

    • SHA512

      6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

    • SSDEEP

      3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l

    Score
    1/10
    • Target

      swiftshader/libEGL.dll

    • Size

      460KB

    • MD5

      acd46d81bb4f34912c255a8d01953635

    • SHA1

      25969cc9e588e174b854566778f283f067c3c0c6

    • SHA256

      bd1bc00a5c29726fb39645041fc6c8295256d90c7f739ebeaa8b6c382a4db189

    • SHA512

      83692654ada422391b428953b2cec67048a171bbef4c59158f34607a762feac8a233b52ceaa528306cf103d9830ee38897afa996389e086d3778f290555a059b

    • SSDEEP

      6144:9ljnvKkgWLOf4qw66is0YtuoCjUnPt5WpbOvcbufBnVjC4mz4sky:nnzgWLOQqD6iATYbObfYvky

    Score
    1/10
    • Target

      swiftshader/libGLESv2.dll

    • Size

      3.1MB

    • MD5

      8090f82a02c6850cc7bd2b481a7533e0

    • SHA1

      54a0b66d76c1b60e45e83ba4627299d0b2aae84a

    • SHA256

      e9473ba82f6d8742ab74e67484886291aa69037db72e0ae256b19581de0b772e

    • SHA512

      b2e3c57926860a7954ca6e426f5f2fa080cf6ccb5c4edd77f59744f240f597aa9613f46294e8b344db76b46fe78777b5016828b8ab2fc274ca107f3af7abd878

    • SSDEEP

      49152:FFE2SqB1Ip0Ak1DWFZ1zyQF+sANuFQ+3ELK/QdYLBYXLkk9/kBOwfoUBYXD5vWqC:4QEZB/SK/QK5PXgw5O1

    Score
    1/10
    • Target

      vk_swiftshader.dll

    • Size

      4.3MB

    • MD5

      df2f469b761a706fba0b50149660f7cf

    • SHA1

      2f9d8cb92b6e321e24a5437a1f77745a3507e7be

    • SHA256

      be1e1dd3897dc9a997fdc5b3216f9af24c20fc678963f7486b0a6dae8900c274

    • SHA512

      827e979f573f5cbbe6dd3c6bbe4414ab0d292005856b651b157f150a8d5605c3e77f76944dc0158ae9c632bdc31c243b1e9a467f03d3d3ddb08e95ff5b2e1347

    • SSDEEP

      49152:nR4+5d8q8C/l80az6722j5V7IqD0o/1aZ/MMN5xSvEftz4VbHX5C+cn4br4nhXsH:dDTvEF89HPoptTgY+XB

    Score
    1/10
    • Target

      vulkan-1.dll

    • Size

      715KB

    • MD5

      67ebd2114a9c3a1b2ce2635f21e100e8

    • SHA1

      15a8315b28dca9d7b5c1f604882050714f130718

    • SHA256

      37ee8858cada6db0e511d083ba0729282b004b7e239966521300955ad8b1b18a

    • SHA512

      6578d098b657ba4b28da60f338e033f5622e2fa9473d1833af85a44b314c1d662fcf12120dc466c7c19fcd5901b012f1f8ae7c9ce65ff8155ecd68714f25e102

    • SSDEEP

      12288:QDSRRxZS8ZkDVQ0FQNNTlSdBHxEXdgzXosoIjspf:QDSZZSe2Q0FOTleadgLP2f

    Score
    1/10
    • Target

      $PLUGINSDIR/nsis7z.dll

    • Size

      391KB

    • MD5

      c6a070b3e68b292bb0efc9b26e85e9cc

    • SHA1

      5a922b96eda6595a68fd0a9051236162ff2e2ada

    • SHA256

      66ac8bd1f273a73e17a3f31d6add739d3cb0330a6417faeda11a9cae00b62d8b

    • SHA512

      8eff8fc16f5bb574bd9483e3b217b67a8986e31497368c06fdaa3a1e93a40aee94a5b31729d01905157b0ae1e556a402f43cd29a4d30a0587e1ec334458a44e8

    • SSDEEP

      6144:KI4T3K6gRPI8G1W3ODli+GIuuu8M1CkJagSdJFCAvgw7nv0Yy6ptK:KBK6gU1YsI+GIuEbgagS7FCyp7cD6po

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks