8fedd0ca0e90c113950ca9fe3685c46bc51515ff68791ef26eb87dd4da965890 | Triage

Resubmissions

19/04/2025, 22:20

250419-19hzksyjy2 10

19/04/2025, 22:16

250419-16282sv1fv 10

19/04/2025, 22:11

250419-1395gsv1ew 10

Analysis

max time kernel
103s
max time network
215s
platform
windows11-21h2_x64
resource
win11-20250410-en
resource tags

arch:x64arch:x86image:win11-20250410-enlocale:en-usos:windows11-21h2-x64system
submitted
19/04/2025, 22:16

Sharing

Report Analysis Logs

General

Target

ColdRAT/Plugins/Ngrok-Installer.dll
Size

400KB
MD5

3e19341a940638536b4a7891d5b2b777
SHA1

ca6f5b28e2e54f3f86fd9f45a792a868c82e35b5
SHA256

b574aabf02a65aa3b6f7bfff0a574873ce96429d3f708a10f87bc1f6518f14aa
SHA512

06639892ea4a27c8840872b0de450ae1a0dac61e1dcb64523973c629580323b723c0e9074ff2ddf9a67a8a6d45473432ffc4a1736c0ddc74e054ae13b774f3e2
SSDEEP

12288:Ws6T2x75lFR/RG+BUKPqnwoCMYKIUTJE:WEB+4+1C0IU

Score

1^/10

Malware Config

Signatures

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ColdRAT\Plugins\Ngrok-Installer.dll,#1
1⤵
PID:4524

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads