Overview
overview
8Static
static
8Cawt-2.9.6...e.docx
windows7-x64
4Cawt-2.9.6...e.docx
windows10-2004-x64
1Cawt-2.9.6...fo.tcl
ubuntu-18.04-amd64
1Cawt-2.9.6...fo.tcl
debian-9-armhf
1Cawt-2.9.6...fo.tcl
debian-9-mips
1Cawt-2.9.6...fo.tcl
debian-9-mipsel
1Cawt-2.9.6...ic.vbs
windows7-x64
1Cawt-2.9.6...ic.vbs
windows10-2004-x64
1Cawt-2.9.6...ed.vbs
windows7-x64
1Cawt-2.9.6...ed.vbs
windows10-2004-x64
1Cawt-2.9.6...il.vbs
windows7-x64
1Cawt-2.9.6...il.vbs
windows10-2004-x64
1Cawt-2.9.6...il.vbs
windows7-x64
1Cawt-2.9.6...il.vbs
windows10-2004-x64
1Cawt-2.9.6...te.vbs
windows7-x64
1Cawt-2.9.6...te.vbs
windows10-2004-x64
1Cawt-2.9.6...il.vbs
windows7-x64
1Cawt-2.9.6...il.vbs
windows10-2004-x64
1Cawt-2.9.6...il.vbs
windows7-x64
1Cawt-2.9.6...il.vbs
windows10-2004-x64
1Cawt-2.9.6...ic.vbs
windows7-x64
1Cawt-2.9.6...ic.vbs
windows10-2004-x64
1Cawt-2.9.6...sv.vbs
windows7-x64
1Cawt-2.9.6...sv.vbs
windows10-2004-x64
1Cawt-2.9.6...ml.vbs
windows7-x64
1Cawt-2.9.6...ml.vbs
windows10-2004-x64
1Cawt-2.9.6...aw.vbs
windows7-x64
1Cawt-2.9.6...aw.vbs
windows10-2004-x64
1Cawt-2.9.6...le.vbs
windows7-x64
1Cawt-2.9.6...le.vbs
windows10-2004-x64
1Cawt-2.9.6...ki.vbs
windows7-x64
1Cawt-2.9.6...ki.vbs
windows10-2004-x64
1Analysis
-
max time kernel
0s -
max time network
130s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240611-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
01-09-2024 20:12
Behavioral task
behavioral1
Sample
Cawt-2.9.6-User/Applications/AbbrExample.docx
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
Cawt-2.9.6-User/Applications/AbbrExample.docx
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Cawt-2.9.6-User/Applications/DocumentInfo.tcl
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral4
Sample
Cawt-2.9.6-User/Applications/DocumentInfo.tcl
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral5
Sample
Cawt-2.9.6-User/Applications/DocumentInfo.tcl
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral6
Sample
Cawt-2.9.6-User/Applications/DocumentInfo.tcl
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral7
Sample
Cawt-2.9.6-User/CawtCore/cawtBasic.vbs
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
Cawt-2.9.6-User/CawtCore/cawtBasic.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Cawt-2.9.6-User/CawtCore/cawtEmbed.vbs
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
Cawt-2.9.6-User/CawtCore/cawtEmbed.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Cawt-2.9.6-User/CawtCore/cawtFileUtil.vbs
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
Cawt-2.9.6-User/CawtCore/cawtFileUtil.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Cawt-2.9.6-User/CawtCore/cawtImgUtil.vbs
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
Cawt-2.9.6-User/CawtCore/cawtImgUtil.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Cawt-2.9.6-User/CawtCore/cawtInterpolate.vbs
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
Cawt-2.9.6-User/CawtCore/cawtInterpolate.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Cawt-2.9.6-User/CawtCore/cawtStringUtil.vbs
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
Cawt-2.9.6-User/CawtCore/cawtStringUtil.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Cawt-2.9.6-User/CawtCore/cawtTestUtil.vbs
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
Cawt-2.9.6-User/CawtCore/cawtTestUtil.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Cawt-2.9.6-User/CawtExcel/excelBasic.vbs
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
Cawt-2.9.6-User/CawtExcel/excelBasic.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Cawt-2.9.6-User/CawtExcel/excelCsv.vbs
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
Cawt-2.9.6-User/CawtExcel/excelCsv.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Cawt-2.9.6-User/CawtExcel/excelHtml.vbs
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
Cawt-2.9.6-User/CawtExcel/excelHtml.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Cawt-2.9.6-User/CawtExcel/excelImgRaw.vbs
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
Cawt-2.9.6-User/CawtExcel/excelImgRaw.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Cawt-2.9.6-User/CawtExcel/excelMatlabFile.vbs
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
Cawt-2.9.6-User/CawtExcel/excelMatlabFile.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Cawt-2.9.6-User/CawtExcel/excelMediaWiki.vbs
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
Cawt-2.9.6-User/CawtExcel/excelMediaWiki.vbs
Resource
win10v2004-20240802-en
General
-
Target
Cawt-2.9.6-User/Applications/DocumentInfo.tcl
-
Size
4KB
-
MD5
2336516fb44886b6a9d2ba62b59a00f4
-
SHA1
d5d7587d403cc3bf9bfd1d340bd77cd8ff9ce5e2
-
SHA256
d91f53a7a9f160f80f8b0a43355139f219e2f68140cf6b12d5a8d1233e4d7c7b
-
SHA512
f3c57c035dc8bdeed51b97a7efbc0da3c2a03483246aeaee9ed9c7d74ab3a17943ddc184c6246c5079d14559eb331aa23f488bd26fc881d0fd94134aaab219e6
-
SSDEEP
96:cf/aFnthkCvcs2mVAT4bfgMNy+WsEvCkPyidaIlb05MNw:SavhEs2mVDfgMNyIQCAyiv05MNw
Malware Config
Signatures
Processes
-
/tmp/Cawt-2.9.6-User/Applications/DocumentInfo.tcl/tmp/Cawt-2.9.6-User/Applications/DocumentInfo.tcl1⤵PID:1511
-
/usr/local/sbin/tclshtclsh /tmp/Cawt-2.9.6-User/Applications/DocumentInfo.tcl1⤵PID:1511
-
/usr/local/bin/tclshtclsh /tmp/Cawt-2.9.6-User/Applications/DocumentInfo.tcl1⤵PID:1511
-
/usr/sbin/tclshtclsh /tmp/Cawt-2.9.6-User/Applications/DocumentInfo.tcl1⤵PID:1511
-
/usr/bin/tclshtclsh /tmp/Cawt-2.9.6-User/Applications/DocumentInfo.tcl1⤵PID:1511
-
/sbin/tclshtclsh /tmp/Cawt-2.9.6-User/Applications/DocumentInfo.tcl1⤵PID:1511
-
/bin/tclshtclsh /tmp/Cawt-2.9.6-User/Applications/DocumentInfo.tcl1⤵PID:1511
-
/snap/bin/tclshtclsh /tmp/Cawt-2.9.6-User/Applications/DocumentInfo.tcl1⤵PID:1511