Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

Cawt-2.9.6...e.docx

windows7-x64

4

Cawt-2.9.6...e.docx

windows10-2004-x64

1

Cawt-2.9.6...fo.tcl

ubuntu-18.04-amd64

1

Cawt-2.9.6...fo.tcl

debian-9-armhf

1

Cawt-2.9.6...fo.tcl

debian-9-mips

1

Cawt-2.9.6...fo.tcl

debian-9-mipsel

1

Cawt-2.9.6...ic.vbs

windows7-x64

1

Cawt-2.9.6...ic.vbs

windows10-2004-x64

1

Cawt-2.9.6...ed.vbs

windows7-x64

1

Cawt-2.9.6...ed.vbs

windows10-2004-x64

1

Cawt-2.9.6...il.vbs

windows7-x64

1

Cawt-2.9.6...il.vbs

windows10-2004-x64

1

Cawt-2.9.6...il.vbs

windows7-x64

1

Cawt-2.9.6...il.vbs

windows10-2004-x64

1

Cawt-2.9.6...te.vbs

windows7-x64

1

Cawt-2.9.6...te.vbs

windows10-2004-x64

1

Cawt-2.9.6...il.vbs

windows7-x64

1

Cawt-2.9.6...il.vbs

windows10-2004-x64

1

Cawt-2.9.6...il.vbs

windows7-x64

1

Cawt-2.9.6...il.vbs

windows10-2004-x64

1

Cawt-2.9.6...ic.vbs

windows7-x64

1

Cawt-2.9.6...ic.vbs

windows10-2004-x64

1

Cawt-2.9.6...sv.vbs

windows7-x64

1

Cawt-2.9.6...sv.vbs

windows10-2004-x64

1

Cawt-2.9.6...ml.vbs

windows7-x64

1

Cawt-2.9.6...ml.vbs

windows10-2004-x64

1

Cawt-2.9.6...aw.vbs

windows7-x64

1

Cawt-2.9.6...aw.vbs

windows10-2004-x64

1

Cawt-2.9.6...le.vbs

windows7-x64

1

Cawt-2.9.6...le.vbs

windows10-2004-x64

1

Cawt-2.9.6...ki.vbs

windows7-x64

1

Cawt-2.9.6...ki.vbs

windows10-2004-x64

1

Analysis

  • max time kernel
    128s
  • max time network
    134s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/09/2024, 20:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Cawt-2.9.6-User/CawtCore/cawtImgUtil.vbs

  • Size

    5KB

  • MD5

    3fa441a13194adbc6efd6549c1f03ed8

  • SHA1

    cb31726e7863e8add6f0c896d82d0f314adc020c

  • SHA256

    5faeaba2b9110ff033fe1f8c1e75f8af0a19a270dea02281c76859a5db678d86

  • SHA512

    c46b0e090849113cee4c81a5b8ef78df991b15c414455cc1e06b55e24c18e2df394ecfa89823321c08caf53e28d1ce210c5c32f70e72ca703d8f76817db27241

  • SSDEEP

    48:l5OvBFRg0OMNLNJshkAhe5oZrvN0imXZ11qdZcq/BOzlidXEiz9zXzl+HZQxFHg+:l0BF60Ou+s5onzZceQED3lkjcsBDcUm5

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Cawt-2.9.6-User\CawtCore\cawtImgUtil.vbs"
    1⤵
      PID:4520
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4396,i,6510295916244954942,10164894160290787457,262144 --variations-seed-version --mojo-platform-channel-handle=4112 /prefetch:8
      1⤵
        PID:5076

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads