fa7cfb7c2183b7a0a23a1aec3355313d4bb097dc91708644227a6d7ac0cb8dee

Analysis

max time kernel
150s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/08/2026, 17:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2345CadAppAR.dll
Size 3.2MB
Sample260816-v8mcqatbmd
SHA256 fa7cfb7c2183b7a0a23a1aec3355313d4bb097dc91708644227a6d7ac0cb8dee
MD5 09ae3247423fb9d713a270bcf141e1e8
SHA1 c0da7d88168a64c78af302378466d141843a325e
SHA512 23cfedbb048ad2482429b2a94e670391db6ef1adff1e5bf07a0728395ada3baca7fe3ab66d12e4b6935b6b40d1f122646ca5a2de1efe2fb0e41d54d8441bdfd6
SSDEEP 49152:ipHpRxAgM8aB7ctCezK1KR8HhCBD1/f4QvHdllOF3OmHBpsfyxFxaCT8cTmAIWwa:IL3Te1KR8HhCF1/fF9ON6aP/eXbDOd
TLSH
T138E56C066EA506ACC1A7C13897578E0BE2B13C450B3466DF296935BE0F77FE05A3B721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion

Malware Config

Signatures

Badlisted process makes network request 2 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
6	3288	rundll32.exe
10	3288	rundll32.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies Control Panel 1 IoCs

defense_evasion

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\Desktop\ForegroundLockTimeout = "0"	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2345CadAppAR.dll,#1
1⤵
- Badlisted process makes network request
- Modifies Control Panel
PID:3288

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

cadapp.dat

Path C:\Users\Admin\AppData\Roaming\2345CadEditAR\cadapp.dat
Size 29B
SHA256 5313e624a817ebcb34675027d12b87465de4fc4fdddfdd74d244490c4911b8e4
MD5 99fb8e84b8aa92889349054a60e1f359
SHA1 1b3dd1afb4fe4533ca16db4dd3e7845c13b0e1c5
SHA512 2a99095109445c3ca1b9fad5c87fdfed331641401ca8d19d3ab4d109e18b9dc5feb739485f14f390bd3bcfa3a4325e3b1278fe1bb8690dd8df16edb9af52faac
MD5 SHA1 SHA512

Submit Download