1b01207c2a72f4e7b1a62254f62365152136b3a2450994a69541b3e7064f6343 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

Cawt-2.9.6...e.docx

windows7-x64

4

Cawt-2.9.6...e.docx

windows10-2004-x64

1

Cawt-2.9.6...fo.tcl

ubuntu-18.04-amd64

1

Cawt-2.9.6...fo.tcl

debian-9-armhf

1

Cawt-2.9.6...fo.tcl

debian-9-mips

1

Cawt-2.9.6...fo.tcl

debian-9-mipsel

1

Cawt-2.9.6...ic.vbs

windows7-x64

1

Cawt-2.9.6...ic.vbs

windows10-2004-x64

1

Cawt-2.9.6...ed.vbs

windows7-x64

1

Cawt-2.9.6...ed.vbs

windows10-2004-x64

1

Cawt-2.9.6...il.vbs

windows7-x64

1

Cawt-2.9.6...il.vbs

windows10-2004-x64

1

Cawt-2.9.6...il.vbs

windows7-x64

1

Cawt-2.9.6...il.vbs

windows10-2004-x64

1

Cawt-2.9.6...te.vbs

windows7-x64

1

Cawt-2.9.6...te.vbs

windows10-2004-x64

1

Cawt-2.9.6...il.vbs

windows7-x64

1

Cawt-2.9.6...il.vbs

windows10-2004-x64

1

Cawt-2.9.6...il.vbs

windows7-x64

1

Cawt-2.9.6...il.vbs

windows10-2004-x64

1

Cawt-2.9.6...ic.vbs

windows7-x64

1

Cawt-2.9.6...ic.vbs

windows10-2004-x64

1

Cawt-2.9.6...sv.vbs

windows7-x64

1

Cawt-2.9.6...sv.vbs

windows10-2004-x64

1

Cawt-2.9.6...ml.vbs

windows7-x64

1

Cawt-2.9.6...ml.vbs

windows10-2004-x64

1

Cawt-2.9.6...aw.vbs

windows7-x64

1

Cawt-2.9.6...aw.vbs

windows10-2004-x64

1

Cawt-2.9.6...le.vbs

windows7-x64

1

Cawt-2.9.6...le.vbs

windows10-2004-x64

1

Cawt-2.9.6...ki.vbs

windows7-x64

1

Cawt-2.9.6...ki.vbs

windows10-2004-x64

1

Analysis

max time kernel
97s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
01/09/2024, 20:12

Sharing

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

Cawt-2.9.6-User/Applications/AbbrExample.docx

Resource

win7-20240729-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

Cawt-2.9.6-User/Applications/AbbrExample.docx

Resource

win10v2004-20240802-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

Cawt-2.9.6-User/Applications/DocumentInfo.tcl

Resource

ubuntu1804-amd64-20240611-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Cawt-2.9.6-User/Applications/DocumentInfo.tcl

Resource

debian9-armhf-20240611-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Cawt-2.9.6-User/Applications/DocumentInfo.tcl

Resource

debian9-mipsbe-20240418-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Cawt-2.9.6-User/Applications/DocumentInfo.tcl

Resource

debian9-mipsel-20240611-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Cawt-2.9.6-User/CawtCore/cawtBasic.vbs

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Cawt-2.9.6-User/CawtCore/cawtBasic.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Cawt-2.9.6-User/CawtCore/cawtEmbed.vbs

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Cawt-2.9.6-User/CawtCore/cawtEmbed.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Cawt-2.9.6-User/CawtCore/cawtFileUtil.vbs

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Cawt-2.9.6-User/CawtCore/cawtFileUtil.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Cawt-2.9.6-User/CawtCore/cawtImgUtil.vbs

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Cawt-2.9.6-User/CawtCore/cawtImgUtil.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Cawt-2.9.6-User/CawtCore/cawtInterpolate.vbs

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Cawt-2.9.6-User/CawtCore/cawtInterpolate.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Cawt-2.9.6-User/CawtCore/cawtStringUtil.vbs

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Cawt-2.9.6-User/CawtCore/cawtStringUtil.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Cawt-2.9.6-User/CawtCore/cawtTestUtil.vbs

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Cawt-2.9.6-User/CawtCore/cawtTestUtil.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Cawt-2.9.6-User/CawtExcel/excelBasic.vbs

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Cawt-2.9.6-User/CawtExcel/excelBasic.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Cawt-2.9.6-User/CawtExcel/excelCsv.vbs

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Cawt-2.9.6-User/CawtExcel/excelCsv.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Cawt-2.9.6-User/CawtExcel/excelHtml.vbs

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Cawt-2.9.6-User/CawtExcel/excelHtml.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Cawt-2.9.6-User/CawtExcel/excelImgRaw.vbs

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Cawt-2.9.6-User/CawtExcel/excelImgRaw.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Cawt-2.9.6-User/CawtExcel/excelMatlabFile.vbs

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Cawt-2.9.6-User/CawtExcel/excelMatlabFile.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Cawt-2.9.6-User/CawtExcel/excelMediaWiki.vbs

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Cawt-2.9.6-User/CawtExcel/excelMediaWiki.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Cawt-2.9.6-User/CawtExcel/excelBasic.vbs
Size

142KB
MD5

26e4c3bf3dedb5529dc248c3b44d7f64
SHA1

9de65f9f12595633d08cedc9c418f9c46d18a150
SHA256

5fb3ad8dadcf4e1f0b4292ea35c1eb95d24a393367ca799bdbb4e15e37cf8bee
SHA512

4f99c8a6ab511655d0da240a73f9fadf925e209b542fc07513491f3f0caa3ae1ec349bef85b3615463f2e1fa8bdd0f98a7978d6eb0d58077c242034689f7c443
SSDEEP

1536:0F11NW2cncVfamR3b09TIsNApxfAZbeK8mZ/PLLg1LKZDDQ6Atxa+gpBIpRJL07B:zJ4xGtWirr5Y57DN4lR8MqJt+

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Cawt-2.9.6-User\CawtExcel\excelBasic.vbs"
1⤵
PID:1928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy