Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
124s -
max time network
160s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
02/08/2024, 16:02 UTC
General
-
Target
MantiWPF/MantiWPF.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000051.js
-
Size
20KB
-
MD5
a4b23d9d414ffb01f694b38377cf165b
-
SHA1
1b545e72a157b8f21afefaa8afac667eaafd3994
-
SHA256
d02c63117fcc399259f467ac5cfb5c39e6feb1eb7d3a04d0b3ba080e4262be04
-
SHA512
0910041a540d450176cf7e260ca01930aadcb8013452c3931cd15cdf1f89d9357020eb12e19fb36b6d49553b2b0e553eaf6fd464c348b186c7cc148014ae1ea8
-
SSDEEP
384:Clcz6i3U3YoGrqBkQbD/F8AtnHntm+tC0Aa5XyUp1r:jUE0zPtHtm+tpzr
Score
3/10
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\MantiWPF\MantiWPF.exe.WebView2\EBWebView\Default\Cache\Cache_Data\f_000051.js1⤵
Network
-
DNS48.229.111.52.in-addr.arpaRemote address:8.8.8.8:53Request48.229.111.52.in-addr.arpaIN PTRResponse -
DNS240.143.123.92.in-addr.arpaRemote address:8.8.8.8:53Request240.143.123.92.in-addr.arpaIN PTRResponse240.143.123.92.in-addr.arpaIN PTRa92-123-143-240deploystaticakamaitechnologiescom
-
DNS13.179.89.13.in-addr.arpaRemote address:8.8.8.8:53Request13.179.89.13.in-addr.arpaIN PTRResponse
-
138.91.171.81:80
-
8.8.8.8:5348.229.111.52.in-addr.arpadns
DNS Request
48.229.111.52.in-addr.arpa
-
8.8.8.8:53240.143.123.92.in-addr.arpadns
DNS Request
240.143.123.92.in-addr.arpa
-
8.8.8.8:5313.179.89.13.in-addr.arpadns
DNS Request
13.179.89.13.in-addr.arpa