fa7cfb7c2183b7a0a23a1aec3355313d4bb097dc91708644227a6d7ac0cb8dee

Analysis

max time kernel
150s
max time network
160s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 17:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2345CadAppAR.dll
Size 3.2MB
Sample260816-v8mcqatbmd
SHA256 fa7cfb7c2183b7a0a23a1aec3355313d4bb097dc91708644227a6d7ac0cb8dee
MD5 09ae3247423fb9d713a270bcf141e1e8
SHA1 c0da7d88168a64c78af302378466d141843a325e
SHA512 23cfedbb048ad2482429b2a94e670391db6ef1adff1e5bf07a0728395ada3baca7fe3ab66d12e4b6935b6b40d1f122646ca5a2de1efe2fb0e41d54d8441bdfd6
SSDEEP 49152:ipHpRxAgM8aB7ctCezK1KR8HhCBD1/f4QvHdllOF3OmHBpsfyxFxaCT8cTmAIWwa:IL3Te1KR8HhCF1/fF9ON6aP/eXbDOd
TLSH
T138E56C066EA506ACC1A7C13897578E0BE2B13C450B3466DF296935BE0F77FE05A3B721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Signatures

Badlisted process makes network request 10 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
5	3340	rundll32.exe
6	3340	rundll32.exe
7	3340	rundll32.exe
8	3340	rundll32.exe
9	3340	rundll32.exe
11	3340	rundll32.exe
14	3340	rundll32.exe
17	3340	rundll32.exe
18	3340	rundll32.exe
19	3340	rundll32.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2345CadAppAR.dll,#1
1⤵
- Badlisted process makes network request
PID:3340

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

cadapp.dat

Path C:\Users\Admin\AppData\Roaming\2345CadEditAR\cadapp.dat
Size 29B
SHA256 5313e624a817ebcb34675027d12b87465de4fc4fdddfdd74d244490c4911b8e4
MD5 99fb8e84b8aa92889349054a60e1f359
SHA1 1b3dd1afb4fe4533ca16db4dd3e7845c13b0e1c5
SHA512 2a99095109445c3ca1b9fad5c87fdfed331641401ca8d19d3ab4d109e18b9dc5feb739485f14f390bd3bcfa3a4325e3b1278fe1bb8690dd8df16edb9af52faac
MD5 SHA1 SHA512

Submit Download