Overview

overview

10

Static

static

10

ColdRAT/ColdRAT.exe

windows10-2004-x64

5

ColdRAT/ColdRAT.exe

windows11-21h2-x64

5

ColdRAT/DotNetZip.dll

windows10-2004-x64

1

ColdRAT/DotNetZip.dll

windows11-21h2-x64

1

ColdRAT/Fa...ox.dll

windows10-2004-x64

1

ColdRAT/Fa...ox.dll

windows11-21h2-x64

1

ColdRAT/Fixer.bat

windows10-2004-x64

1

ColdRAT/Fixer.bat

windows11-21h2-x64

1

ColdRAT/GM...re.dll

windows10-2004-x64

1

ColdRAT/GM...re.dll

windows11-21h2-x64

1

ColdRAT/GM...ms.dll

windows10-2004-x64

1

ColdRAT/GM...ms.dll

windows11-21h2-x64

1

ColdRAT/Guna.UI2.dll

windows10-2004-x64

1

ColdRAT/Guna.UI2.dll

windows11-21h2-x64

1

ColdRAT/Ic...or.dll

windows10-2004-x64

1

ColdRAT/Ic...or.dll

windows11-21h2-x64

1

ColdRAT/NAudio.dll

windows10-2004-x64

1

ColdRAT/NAudio.dll

windows11-21h2-x64

1

ColdRAT/Ne...on.dll

windows10-2004-x64

1

ColdRAT/Ne...on.dll

windows11-21h2-x64

1

ColdRAT/Pl...ws.dll

windows10-2004-x64

1

ColdRAT/Pl...ws.dll

windows11-21h2-x64

1

ColdRAT/Pl...at.dll

windows10-2004-x64

1

ColdRAT/Pl...at.dll

windows11-21h2-x64

1

ColdRAT/Pl...um.dll

windows10-2004-x64

1

ColdRAT/Pl...um.dll

windows11-21h2-x64

1

ColdRAT/Pl...rd.dll

windows10-2004-x64

1

ColdRAT/Pl...rd.dll

windows11-21h2-x64

1

ColdRAT/Pl...ss.dll

windows10-2004-x64

1

ColdRAT/Pl...ss.dll

windows11-21h2-x64

1

ColdRAT/Pl...er.dll

windows10-2004-x64

1

ColdRAT/Pl...er.dll

windows11-21h2-x64

1

Analysis

  • max time kernel
    100s
  • max time network
    104s
  • platform
    windows11-21h2_x64
  • resource
    win11-20250410-en
  • resource tags

    arch:x64arch:x86image:win11-20250410-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    19/04/2025, 22:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ColdRAT/FastColoredTextBox.dll

  • Size

    323KB

  • MD5

    93b19f24add82a6cda96bbb3eaa755f9

  • SHA1

    b83179a79862aedc92ee79b6cb8a7e4525266687

  • SHA256

    6eb6a0c64ee8c575f56a93065138b17883118cf231a6916fc601ec86793d85bf

  • SHA512

    2521a11cc557b68b05f57048d1f2bb719fcac86c19e151bc16d3938d45f9c7ece72a5573d3293b0c290cb7f141c0dc3a1aa422444997473697836ec4a112a8f6

  • SSDEEP

    6144:5creWpl5UDYd01MVwKaWVwu1h3eE3L/CdesqtLDI5eNBAkM:5eJyDgaKlrh3bb/I3eNOk

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\ColdRAT\FastColoredTextBox.dll,#1
    1⤵
      PID:4640

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads