Overview

overview

10

Static

static

10

ColdRAT.zip

windows10-2004-x64

1

ColdRAT.zip

windows11-21h2-x64

1

ColdRAT/Pl...rd.dll

windows10-2004-x64

1

ColdRAT/Pl...rd.dll

windows11-21h2-x64

1

ColdRAT/Pl...ss.dll

windows10-2004-x64

1

ColdRAT/Pl...ss.dll

windows11-21h2-x64

1

ColdRAT/Pl...er.dll

windows10-2004-x64

1

ColdRAT/Pl...er.dll

windows11-21h2-x64

1

ColdRAT/Pl...er.dll

windows10-2004-x64

1

ColdRAT/Pl...er.dll

windows11-21h2-x64

1

ColdRAT/Pl...er.dll

windows10-2004-x64

1

ColdRAT/Pl...er.dll

windows11-21h2-x64

1

ColdRAT/Pl...DP.dll

windows10-2004-x64

1

ColdRAT/Pl...DP.dll

windows11-21h2-x64

1

ColdRAT/Pl...NC.dll

windows10-2004-x64

1

ColdRAT/Pl...NC.dll

windows11-21h2-x64

1

ColdRAT/Pl...ry.dll

windows10-2004-x64

1

ColdRAT/Pl...ry.dll

windows11-21h2-x64

1

ColdRAT/Pl...ps.dll

windows10-2004-x64

1

ColdRAT/Pl...ps.dll

windows11-21h2-x64

1

ColdRAT/Pl...ns.dll

windows10-2004-x64

1

ColdRAT/Pl...ns.dll

windows11-21h2-x64

1

ColdRAT/Pl...er.dll

windows10-2004-x64

1

ColdRAT/Pl...er.dll

windows11-21h2-x64

1

ColdRAT/Pl...ps.dll

windows10-2004-x64

1

ColdRAT/Pl...ps.dll

windows11-21h2-x64

1

ColdRAT/Pl...ox.dll

windows10-2004-x64

1

ColdRAT/Pl...ox.dll

windows11-21h2-x64

1

ColdRAT/Pl...ne.dll

windows10-2004-x64

1

ColdRAT/Pl...ne.dll

windows11-21h2-x64

1

ColdRAT/Pl...er.dll

windows10-2004-x64

1

ColdRAT/Pl...er.dll

windows11-21h2-x64

1

Resubmissions

19/04/2025, 22:20

250419-19hzksyjy2 10

19/04/2025, 22:16

250419-16282sv1fv 10

19/04/2025, 22:11

250419-1395gsv1ew 10

Analysis

  • max time kernel
    102s
  • max time network
    212s
  • platform
    windows11-21h2_x64
  • resource
    win11-20250410-en
  • resource tags

    arch:x64arch:x86image:win11-20250410-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    19/04/2025, 22:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ColdRAT/Plugins/MessageBox.dll

  • Size

    14KB

  • MD5

    7db8b7e15194fa60ffed768b6cf948c2

  • SHA1

    3de1b56cc550411c58cd1ad7ba845f3269559b5c

  • SHA256

    bc09b671894c9a36f4eca45dd6fbf958a967acea9e85b66c38a319387b90dd29

  • SHA512

    e7f5430b0d46f133dc9616f9eeae8fb42f07a8a4a18b927dd7497de29451086629dfc5e63c0b2a60a4603d8421c6570967c5dbde498bb480aef353b3ed8e18a1

  • SSDEEP

    384:56lIcAn3tURnUKCvUUVT/95gG3UX/NZSQW9:56lIL3tUSvbVa/NZG

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\ColdRAT\Plugins\MessageBox.dll,#1
    1⤵
      PID:1212

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads