Overview

overview

10

Static

static

10

ColdRAT/ColdRAT.exe

windows10-2004-x64

5

ColdRAT/ColdRAT.exe

windows11-21h2-x64

5

ColdRAT/DotNetZip.dll

windows10-2004-x64

1

ColdRAT/DotNetZip.dll

windows11-21h2-x64

1

ColdRAT/Fa...ox.dll

windows10-2004-x64

1

ColdRAT/Fa...ox.dll

windows11-21h2-x64

1

ColdRAT/Fixer.bat

windows10-2004-x64

1

ColdRAT/Fixer.bat

windows11-21h2-x64

1

ColdRAT/GM...re.dll

windows10-2004-x64

1

ColdRAT/GM...re.dll

windows11-21h2-x64

1

ColdRAT/GM...ms.dll

windows10-2004-x64

1

ColdRAT/GM...ms.dll

windows11-21h2-x64

1

ColdRAT/Guna.UI2.dll

windows10-2004-x64

1

ColdRAT/Guna.UI2.dll

windows11-21h2-x64

1

ColdRAT/Ic...or.dll

windows10-2004-x64

1

ColdRAT/Ic...or.dll

windows11-21h2-x64

1

ColdRAT/NAudio.dll

windows10-2004-x64

1

ColdRAT/NAudio.dll

windows11-21h2-x64

1

ColdRAT/Ne...on.dll

windows10-2004-x64

1

ColdRAT/Ne...on.dll

windows11-21h2-x64

1

ColdRAT/Pl...ws.dll

windows10-2004-x64

1

ColdRAT/Pl...ws.dll

windows11-21h2-x64

1

ColdRAT/Pl...at.dll

windows10-2004-x64

1

ColdRAT/Pl...at.dll

windows11-21h2-x64

1

ColdRAT/Pl...um.dll

windows10-2004-x64

1

ColdRAT/Pl...um.dll

windows11-21h2-x64

1

ColdRAT/Pl...rd.dll

windows10-2004-x64

1

ColdRAT/Pl...rd.dll

windows11-21h2-x64

1

ColdRAT/Pl...ss.dll

windows10-2004-x64

1

ColdRAT/Pl...ss.dll

windows11-21h2-x64

1

ColdRAT/Pl...er.dll

windows10-2004-x64

1

ColdRAT/Pl...er.dll

windows11-21h2-x64

1

Analysis

  • max time kernel
    101s
  • max time network
    105s
  • platform
    windows11-21h2_x64
  • resource
    win11-20250410-en
  • resource tags

    arch:x64arch:x86image:win11-20250410-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    19/04/2025, 22:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ColdRAT/DotNetZip.dll

  • Size

    461KB

  • MD5

    a999d7f3807564cc816c16f862a60bbe

  • SHA1

    1ee724daaf70c6b0083bf589674b6f6d8427544f

  • SHA256

    8e9c0362e9bfb3c49af59e1b4d376d3e85b13aed0fbc3f5c0e1ebc99c07345f3

  • SHA512

    6f1f73314d86ae324cc7f55d8e6352e90d4a47f0200671f7069daa98592daaceea34cf89b47defbecdda7d3b3e4682de70e80a5275567b82aa81b002958e4414

  • SSDEEP

    6144:DuCInHLhJI4FY/ixjci6ychf8xalGQGtSV41kJDsTDDpBnse6OVxLV/W:3QL32ikCaUS4csRBse6sfW

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\ColdRAT\DotNetZip.dll,#1
    1⤵
      PID:1592

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads