Overview

overview

10

Static

static

10

ColdRAT.zip

windows10-2004-x64

1

ColdRAT.zip

windows11-21h2-x64

1

ColdRAT/Pl...rd.dll

windows10-2004-x64

1

ColdRAT/Pl...rd.dll

windows11-21h2-x64

1

ColdRAT/Pl...ss.dll

windows10-2004-x64

1

ColdRAT/Pl...ss.dll

windows11-21h2-x64

1

ColdRAT/Pl...er.dll

windows10-2004-x64

1

ColdRAT/Pl...er.dll

windows11-21h2-x64

1

ColdRAT/Pl...er.dll

windows10-2004-x64

1

ColdRAT/Pl...er.dll

windows11-21h2-x64

1

ColdRAT/Pl...er.dll

windows10-2004-x64

1

ColdRAT/Pl...er.dll

windows11-21h2-x64

1

ColdRAT/Pl...DP.dll

windows10-2004-x64

1

ColdRAT/Pl...DP.dll

windows11-21h2-x64

1

ColdRAT/Pl...NC.dll

windows10-2004-x64

1

ColdRAT/Pl...NC.dll

windows11-21h2-x64

1

ColdRAT/Pl...ry.dll

windows10-2004-x64

1

ColdRAT/Pl...ry.dll

windows11-21h2-x64

1

ColdRAT/Pl...ps.dll

windows10-2004-x64

1

ColdRAT/Pl...ps.dll

windows11-21h2-x64

1

ColdRAT/Pl...ns.dll

windows10-2004-x64

1

ColdRAT/Pl...ns.dll

windows11-21h2-x64

1

ColdRAT/Pl...er.dll

windows10-2004-x64

1

ColdRAT/Pl...er.dll

windows11-21h2-x64

1

ColdRAT/Pl...ps.dll

windows10-2004-x64

1

ColdRAT/Pl...ps.dll

windows11-21h2-x64

1

ColdRAT/Pl...ox.dll

windows10-2004-x64

1

ColdRAT/Pl...ox.dll

windows11-21h2-x64

1

ColdRAT/Pl...ne.dll

windows10-2004-x64

1

ColdRAT/Pl...ne.dll

windows11-21h2-x64

1

ColdRAT/Pl...er.dll

windows10-2004-x64

1

ColdRAT/Pl...er.dll

windows11-21h2-x64

1

Resubmissions

19/04/2025, 22:20

250419-19hzksyjy2 10

19/04/2025, 22:16

250419-16282sv1fv 10

19/04/2025, 22:11

250419-1395gsv1ew 10

Analysis

  • max time kernel
    156s
  • max time network
    278s
  • platform
    windows11-21h2_x64
  • resource
    win11-20250410-en
  • resource tags

    arch:x64arch:x86image:win11-20250410-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    19/04/2025, 22:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ColdRAT/Plugins/HVNCMemory.dll

  • Size

    39KB

  • MD5

    065f0830d1e36f8f44702b0f567082e8

  • SHA1

    724c33558fcc8ecd86ee56335e8f6eb5bfeac0db

  • SHA256

    285b462e3cd4a5b207315ad33ee6965a8b98ca58abb8d16882e4bc2d758ff1a4

  • SHA512

    bac0148e1b78a8fde242697bff1bbe10a18ffab85fdced062de3dc5017cd77f0d54d8096e273523b8a3910fe17fac111724acffa5bec30e4d81b7b3bd312d545

  • SSDEEP

    768:EofXMCBlQ6Kms0n6GE30IU1YKtq9oQog1zq/xPP7:EyXTa6hEZU1YKwo8Uj

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\ColdRAT\Plugins\HVNCMemory.dll,#1
    1⤵
      PID:4568

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads