Resubmissions

19/04/2025, 22:20

250419-19hzksyjy2 10

19/04/2025, 22:16

250419-16282sv1fv 10

19/04/2025, 22:11

250419-1395gsv1ew 10

Analysis

  • max time kernel
    101s
  • max time network
    214s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250314-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/04/2025, 22:16

General

  • Target

    ColdRAT/Plugins/FileManager.dll

  • Size

    679KB

  • MD5

    641a8b61cb468359b1346a0891d65b59

  • SHA1

    2cdc49bcd7428fe778a94cdcd19cabf5ece8c9c0

  • SHA256

    b58ed3ebbcd27c7f4b173819528ff4db562b90475a5e304521ed5c564d39fffd

  • SHA512

    042702d34664ea6288e891c9f7aa10a5b4b07317f25f82d6c9fa9ba9b98645c14073d0f66637060b416a30c58dec907d9383530320a318523c51f19ebd0a4fee

  • SSDEEP

    12288:bVnchrRTHcQ3nrn6xtI9qR5WcygA5KeirCDD/:btJQ3nrnMI9MUlr5Kei+DD/

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\ColdRAT\Plugins\FileManager.dll,#1
    1⤵
      PID:3280

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads