Overview
overview
7Static
static
3OpenSCAD-2...er.exe
windows10-2004-x64
7OpenSCAD-2...er.exe
windows11-ltsc_2024-x64
7examples/O...09.vbs
windows10-2004-x64
5examples/O...09.vbs
windows11-ltsc_2024-x64
5libraries/...ocs.py
windows10-2004-x64
3libraries/...ocs.py
windows11-ltsc_2024-x64
3libraries/...cad.py
windows10-2004-x64
3libraries/...cad.py
windows11-ltsc_2024-x64
3openscad.exe
windows10-2004-x64
openscad.exe
windows11-ltsc_2024-x64
openscad.exe
windows10-2004-x64
openscad.exe
windows11-ltsc_2024-x64
Analysis
- max time kernel
150s - max time network
146s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
18/10/2026, 22:23
Behavioral task
behavioral1
Sample
OpenSCAD-2021.01-x86-64-Installer.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
OpenSCAD-2021.01-x86-64-Installer.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
examples/Old/example009.vbs
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
examples/Old/example009.vbs
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
libraries/MCAD/test_docs.py
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral6
Sample
libraries/MCAD/test_docs.py
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral7
Sample
libraries/MCAD/test_mcad.py
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral8
Sample
libraries/MCAD/test_mcad.py
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral9
Sample
openscad.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
openscad.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
openscad.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
openscad.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target OpenSCAD-2021.01-x86-64-Installer.exe
- Size 20.9MB
- Sample261018-2a1wsawsfx
- SHA256 fbe1e590e1af2af863f5d92bd263eb4644d0ee29352e3ab566366e87a8f6ed12
- MD5 464819319624e636fd8ed49d3f742919
- SHA1 ade9523bc25df753b46a51efbf53cf8ba5436a17
- SHA512 b1377e8892583a3d8c53d9c6eb02e7cd59a33806593173e4f2cc3ce115666a8196f6f53436304d5672c466140cc01e4fa24fa97f1ec85a84b81a6e3b7b2c66ba
- SSDEEP 393216:E9i79RNJaV7JX0/mmwx1Ec7lyAArdqUjpuTrvnfxVtEqj7mn/14cFYcWr3BsfRR+:E9ip9K7JX0u1TAcUkPPf3/jA/acFYcWx
- TLSH T10A273389E06718FFE83FC476465D7E3E1A084C469CCE81E9ED3356916EE02F1EA5D424
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
pid Process 4572 OpenSCAD-2021.01-x86-64-Installer.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\OpenSCAD\examples\Functions\list_comprehensions.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\examples\Old\example007.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\examples\Old\example021.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\libraries\MCAD\utilities.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\fonts\conf.d\10-hinting-slight.conf OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\color-schemes\render\sunset.json OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\examples\Old\example001.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\examples\Old\example010.dat OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\examples\Parametric\candleStand.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\libraries\MCAD\TODO OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\libraries\MCAD\screw.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\fonts\Liberation-2.00.1\ChangeLog OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\fonts\conf.d\50-user.conf OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\examples\Basics\logo_and_text.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\examples\Old\example024.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\locale\pl\LC_MESSAGES\openscad.mo OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\examples\Advanced\GEB.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\examples\Old\example009.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\examples\Old\example013.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\libraries\MCAD\nuts_and_bolts.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\libraries\MCAD\bitmap\name_tag.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\fonts\conf.d\69-unifont.conf OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\examples\examples.json OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\examples\Basics\text_on_cube.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\libraries\MCAD\gridbeam.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\fonts\Liberation-2.00.1\ttf\LiberationSerif-Bold.ttf OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\fonts\Liberation-2.00.1\ttf\LiberationSerif-Italic.ttf OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\locale\uk\LC_MESSAGES\openscad.mo OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\color-schemes\editor\solarized-light.json OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\color-schemes\render\starnight.json OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\examples\Advanced\children.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\examples\Basics\CSG.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\libraries\MCAD\lgpl-2.1.txt OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\libraries\MCAD\openscad_utils.py OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\locale\zh_TW\LC_MESSAGES\openscad.mo OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\color-schemes\readme.txt OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\openscad.com OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\examples\Old\example015.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\libraries\MCAD\fonts.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\fonts\Liberation-2.00.1\ttf\LiberationMono-Bold.ttf OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\libraries\MCAD\3d_triangle.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\libraries\MCAD\teardrop.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\libraries\MCAD\units.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\fonts\Liberation-2.00.1\ttf\LiberationSans-Bold.ttf OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\fonts\Liberation-2.00.1\ttf\LiberationSans-Italic.ttf OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\templates\for.json OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\examples\Old\example010.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\examples\Parametric\sign.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\libraries\MCAD\involute_gears.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\libraries\MCAD\metric_fastners.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\examples\Old\example022.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\libraries\MCAD\shapes.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\libraries\MCAD\test_mcad.py OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\libraries\MCAD\trochoids.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\libraries\MCAD\bitmap\height_map.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\fonts\conf.d\65-fonts-persian.conf OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\examples\COPYING-CC0.txt OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\examples\Advanced\surface_image.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\libraries\MCAD\constants.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\libraries\MCAD\triangles.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\examples\Functions\polygon_areas.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\examples\Old\example009.dxf OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\examples\Old\example014.scad OpenSCAD-2021.01-x86-64-Installer.exe File created C:\Program Files\OpenSCAD\fonts\Liberation-2.00.1\TODO OpenSCAD-2021.01-x86-64-Installer.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language OpenSCAD-2021.01-x86-64-Installer.exe - Modifies registry class 16 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.scad OpenSCAD-2021.01-x86-64-Installer.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\OpenSCAD_File\shell\ = "open" OpenSCAD-2021.01-x86-64-Installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\OpenSCAD_File\shell\edit OpenSCAD-2021.01-x86-64-Installer.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\OpenSCAD_File\shell\edit\ = "Edit OpenSCAD_File" OpenSCAD-2021.01-x86-64-Installer.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.scad\PerceivedType = "text" OpenSCAD-2021.01-x86-64-Installer.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\OpenSCAD_File\ = "OpenSCAD_File" OpenSCAD-2021.01-x86-64-Installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\OpenSCAD_File\shell OpenSCAD-2021.01-x86-64-Installer.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\OpenSCAD_File\DefaultIcon\ = "C:\\Program Files\\OpenSCAD\\openscad.exe,0" OpenSCAD-2021.01-x86-64-Installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\OpenSCAD_File\shell\edit\command OpenSCAD-2021.01-x86-64-Installer.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\OpenSCAD_File\shell\edit\command\ = "\"C:\\Program Files\\OpenSCAD\\openscad.exe\" \"%1\"" OpenSCAD-2021.01-x86-64-Installer.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.scad\ = "OpenSCAD_File" OpenSCAD-2021.01-x86-64-Installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\OpenSCAD_File OpenSCAD-2021.01-x86-64-Installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\OpenSCAD_File\DefaultIcon OpenSCAD-2021.01-x86-64-Installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\OpenSCAD_File\shell\open\command OpenSCAD-2021.01-x86-64-Installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\OpenSCAD_File\shell\open OpenSCAD-2021.01-x86-64-Installer.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\OpenSCAD_File\shell\open\command\ = "\"C:\\Program Files\\OpenSCAD\\openscad.exe\" \"%1\"" OpenSCAD-2021.01-x86-64-Installer.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\nsw4741.tmp\System.dll
- Size 23KB
- SHA256 4177e765eed3bba3794cd21b50779c097e8a943bc92c3621f2f51a85cef46def
- MD5 8e050192b6b98d8adfffc297e7d6ecaa
- SHA1 bd1f7591c36a172caad81ef1b3ea51e998e1cce4
- SHA512 12d7694987fbb6aea59102a25498291ea0f8e44ac57ad2ac744199123534b8cb3c373b5fdeecc0e09f971db63f543bbb2809d24be29a0c03deaf4dfd5e463f33
- SSDEEP 384:QsuiXfwnOEFMUgKWSeMPe3+6a+A6PcPpntKfh00g5j9nj:lfwnLFMUGMPenA6Yuh9yj
- TLSH T11BB23B09ED078CF3D09204F4056AFF7F8ABFDD50B43E4696E7A09D96DE33A501628A12
- MD5 SHA1 SHA512 SSDEEP TLSH