1b01207c2a72f4e7b1a62254f62365152136b3a2450994a69541b3e7064f6343 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

Cawt-2.9.6...e.docx

windows7-x64

4

Cawt-2.9.6...e.docx

windows10-2004-x64

1

Cawt-2.9.6...fo.tcl

ubuntu-18.04-amd64

1

Cawt-2.9.6...fo.tcl

debian-9-armhf

1

Cawt-2.9.6...fo.tcl

debian-9-mips

1

Cawt-2.9.6...fo.tcl

debian-9-mipsel

1

Cawt-2.9.6...ic.vbs

windows7-x64

1

Cawt-2.9.6...ic.vbs

windows10-2004-x64

1

Cawt-2.9.6...ed.vbs

windows7-x64

1

Cawt-2.9.6...ed.vbs

windows10-2004-x64

1

Cawt-2.9.6...il.vbs

windows7-x64

1

Cawt-2.9.6...il.vbs

windows10-2004-x64

1

Cawt-2.9.6...il.vbs

windows7-x64

1

Cawt-2.9.6...il.vbs

windows10-2004-x64

1

Cawt-2.9.6...te.vbs

windows7-x64

1

Cawt-2.9.6...te.vbs

windows10-2004-x64

1

Cawt-2.9.6...il.vbs

windows7-x64

1

Cawt-2.9.6...il.vbs

windows10-2004-x64

1

Cawt-2.9.6...il.vbs

windows7-x64

1

Cawt-2.9.6...il.vbs

windows10-2004-x64

1

Cawt-2.9.6...ic.vbs

windows7-x64

1

Cawt-2.9.6...ic.vbs

windows10-2004-x64

1

Cawt-2.9.6...sv.vbs

windows7-x64

1

Cawt-2.9.6...sv.vbs

windows10-2004-x64

1

Cawt-2.9.6...ml.vbs

windows7-x64

1

Cawt-2.9.6...ml.vbs

windows10-2004-x64

1

Cawt-2.9.6...aw.vbs

windows7-x64

1

Cawt-2.9.6...aw.vbs

windows10-2004-x64

1

Cawt-2.9.6...le.vbs

windows7-x64

1

Cawt-2.9.6...le.vbs

windows10-2004-x64

1

Cawt-2.9.6...ki.vbs

windows7-x64

1

Cawt-2.9.6...ki.vbs

windows10-2004-x64

1

Analysis

max time kernel
99s
max time network
104s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
01/09/2024, 20:12

Sharing

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

Cawt-2.9.6-User/Applications/AbbrExample.docx

Resource

win7-20240729-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

Cawt-2.9.6-User/Applications/AbbrExample.docx

Resource

win10v2004-20240802-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

Cawt-2.9.6-User/Applications/DocumentInfo.tcl

Resource

ubuntu1804-amd64-20240611-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Cawt-2.9.6-User/Applications/DocumentInfo.tcl

Resource

debian9-armhf-20240611-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Cawt-2.9.6-User/Applications/DocumentInfo.tcl

Resource

debian9-mipsbe-20240418-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Cawt-2.9.6-User/Applications/DocumentInfo.tcl

Resource

debian9-mipsel-20240611-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Cawt-2.9.6-User/CawtCore/cawtBasic.vbs

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Cawt-2.9.6-User/CawtCore/cawtBasic.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Cawt-2.9.6-User/CawtCore/cawtEmbed.vbs

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Cawt-2.9.6-User/CawtCore/cawtEmbed.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Cawt-2.9.6-User/CawtCore/cawtFileUtil.vbs

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Cawt-2.9.6-User/CawtCore/cawtFileUtil.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Cawt-2.9.6-User/CawtCore/cawtImgUtil.vbs

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Cawt-2.9.6-User/CawtCore/cawtImgUtil.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Cawt-2.9.6-User/CawtCore/cawtInterpolate.vbs

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Cawt-2.9.6-User/CawtCore/cawtInterpolate.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Cawt-2.9.6-User/CawtCore/cawtStringUtil.vbs

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Cawt-2.9.6-User/CawtCore/cawtStringUtil.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Cawt-2.9.6-User/CawtCore/cawtTestUtil.vbs

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Cawt-2.9.6-User/CawtCore/cawtTestUtil.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Cawt-2.9.6-User/CawtExcel/excelBasic.vbs

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Cawt-2.9.6-User/CawtExcel/excelBasic.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Cawt-2.9.6-User/CawtExcel/excelCsv.vbs

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Cawt-2.9.6-User/CawtExcel/excelCsv.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Cawt-2.9.6-User/CawtExcel/excelHtml.vbs

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Cawt-2.9.6-User/CawtExcel/excelHtml.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Cawt-2.9.6-User/CawtExcel/excelImgRaw.vbs

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Cawt-2.9.6-User/CawtExcel/excelImgRaw.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Cawt-2.9.6-User/CawtExcel/excelMatlabFile.vbs

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Cawt-2.9.6-User/CawtExcel/excelMatlabFile.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Cawt-2.9.6-User/CawtExcel/excelMediaWiki.vbs

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Cawt-2.9.6-User/CawtExcel/excelMediaWiki.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Cawt-2.9.6-User/CawtExcel/excelHtml.vbs
Size

13KB
MD5

c424e1c15bb0b8027d6f68c64d62c1e2
SHA1

3a1ad8bd31bf12223013a35bdd287b43a8228b18
SHA256

8f1c6e1cdc397851979a7fb3cc7d8d4112f6b6ba7fc7b2f56af17500373f2c77
SHA512

23342130a2cad050f259ffc45fa3852ff69eee41a2a4a8bbd2b10ca443d89f2f15a21c4817417ef81362b9a03813dd35d4e8246c6f77f2c9f4f3f5f8bdfea57a
SSDEEP

192:lyFp4K0E1Akc67Cn7dYxFxyphpk0CCWUUb6c/myEyZQS/sfY2+mDWOE/vE4mxL/p:0Fp4JPkWUeatz0k2phTKgX

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Cawt-2.9.6-User\CawtExcel\excelHtml.vbs"
1⤵
PID:4796

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy