f8cf1ae877bc1b70b35325b5e255a03df789cd09805ad6d394441a8b8e553de3 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

ColdRoot.zip

windows10-2004-x64

1

ColdRoot.zip

windows11-ltsc_2024-x64

1

Coldroot/c...fo.xml

windows10-2004-x64

3

Coldroot/c...fo.xml

windows11-ltsc_2024-x64

1

Coldroot/c...driver

macos-10.15-amd64

1

Coldroot/c...nx.wol

windows10-2004-x64

3

Coldroot/c...nx.wol

windows11-ltsc_2024-x64

3

Coldroot/c...kgInfo

windows10-2004-x64

3

Coldroot/c...kgInfo

windows11-ltsc_2024-x64

3

Coldroot/c...n.icns

windows10-2004-x64

3

Coldroot/c...n.icns

windows11-ltsc_2024-x64

3

Coldroot/readme.txt

windows10-2004-x64

1

Coldroot/readme.txt

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
ColdRoot.zip
Size 1.3MB
Sample260817-1klzyazzht
SHA256 f8cf1ae877bc1b70b35325b5e255a03df789cd09805ad6d394441a8b8e553de3
MD5 8bd2e2ae82a0e9fb1f7eb2fdf8d92f59
SHA1 0116ef4bd8ecad5c48cc3653b7b8a74832876876
SHA512 5ffe86c8e37db96a1cb4dc084c5f888ac76ddcbaa58bb9493bb54b2bf941f29452b188b4f7366f5b39e71b5f1dd10ac01f1edc4f4803b0f814dd49cea189af83
SSDEEP 24576:5o13nIw64XGodkHcd9CjwdYDxl+5RR4sd9/jAAmNbs6hoZ6NhnO/Nx/k:y3tfocd9CgcAvJd97hn6hoZIhl
TLSH
T1735533720B381B49CE1F2D74A876AD627183D9C3A3ED9A1B9738CE71B240AD51CD60B5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery execution macos ransomware spyware

Static task

static1

Behavioral task

behavioral1

Sample

ColdRoot.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

ColdRoot.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Coldroot/com.apple.audio.driver2.app/Contents/Info.xml

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral4

Sample

Coldroot/com.apple.audio.driver2.app/Contents/Info.xml

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Coldroot/com.apple.audio.driver2.app/Contents/MacOS/com.apple.audio.driver

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Coldroot/com.apple.audio.driver2.app/Contents/MacOS/conx.wol

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

Coldroot/com.apple.audio.driver2.app/Contents/MacOS/conx.wol

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

Coldroot/com.apple.audio.driver2.app/Contents/PkgInfo

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

Coldroot/com.apple.audio.driver2.app/Contents/PkgInfo

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

Coldroot/com.apple.audio.driver2.app/Contents/Resources/macicon.icns

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

Coldroot/com.apple.audio.driver2.app/Contents/Resources/macicon.icns

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

Coldroot/readme.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

Coldroot/readme.txt

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  ColdRoot.zip
- Size 1.3MB
- SHA256 f8cf1ae877bc1b70b35325b5e255a03df789cd09805ad6d394441a8b8e553de3
- MD5 8bd2e2ae82a0e9fb1f7eb2fdf8d92f59
- SHA1 0116ef4bd8ecad5c48cc3653b7b8a74832876876
- SHA512 5ffe86c8e37db96a1cb4dc084c5f888ac76ddcbaa58bb9493bb54b2bf941f29452b188b4f7366f5b39e71b5f1dd10ac01f1edc4f4803b0f814dd49cea189af83
- SSDEEP 24576:5o13nIw64XGodkHcd9CjwdYDxl+5RR4sd9/jAAmNbs6hoZ6NhnO/Nx/k:y3tfocd9CgcAvJd97hn6hoZIhl
- TLSH
  T1735533720B381B49CE1F2D74A876AD627183D9C3A3ED9A1B9738CE71B240AD51CD60B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Coldroot/com.apple.audio.driver2.app/Contents/Info.plist
- Size 811B
- SHA256 3b9075ed7f0975b7742fe0bd457f7f4fa08e2cd2ec709a3bee70b0af87a423e8
- MD5 b2da75d6b968b18f2fcc590f52f7808b
- SHA1 24e446b4b365210b7c682aab079f58622c70f031
- SHA512 ab72e70d2ff9b9c0eb49340c13b5b4373c09fd374118df4d393beb9cd8d2abfbf4441fc84e65429d73669c3d03f0a36660c43ac9cb1d405111754fad6d3aec23
- TLSH
  T13D01086006D5E8080DB21AE77390915A12D8F1CC8CB30DE5BC8E9A47061FD2607F3A56
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  Coldroot/com.apple.audio.driver2.app/Contents/MacOS/com.apple.audio.driver
- Size 960KB
- SHA256 d7cd18d3e6929dd1e5c12613f9a937fd45f75aa6e0ecee70908d2638f6b3ce7c
- MD5 d787b809a6a1512212435acd6c4b33ce
- SHA1 9dcb528eb085161a63e1729931890fb6f17e1f15
- SHA512 468f04d926aac3179e951e940595d876407e13d4885a0ee183a2c6bea8fe6802e3b2e6bf0c20fc91d672587bbdcc5db3f6832952f76cca90b6fb357f5b89d674
- SSDEEP 24576:kfEDk3c8XaEU9PrjDdaJujYfX8d7Rl/78xlzcL+gHvNBEcnBHMEx:xk3c8nUlD5Ix1cqg1ie
- TLSH
  T16125233DA52D0267ECA2A7FD83421E7B53E3C28DE1D9245221CE59EB54FB0E98503BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Coldroot/com.apple.audio.driver2.app/Contents/MacOS/conx.wol
- Size 146B
- SHA256 5a8aa3e5ae430a7e466b80875375cb7196a9cfa21964f373a6941426f24ea55e
- MD5 5e9ed87fff44bb0e9776f32e21fa8c0f
- SHA1 291c356c6e224e80d5db516778858bb19231f803
- SHA512 6a17a2d7826c45d33ceab47b883d2845da5008e11a0a18c999f8ba878683dcd8a53f263b9a9b2fade5921c8bafeff5332d65fdca3a0c398de618717630dd6a95
- TLSH
  T14DC04C44065E2D61C43498A820A7B9514ABC4B9F52578B48664AFE12B626413882087F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6 behavioral7
- Target
  Coldroot/com.apple.audio.driver2.app/Contents/PkgInfo
- Size 9B
- SHA256 febbfd5c0e9dab613ada059268ba24c04d76a7054904287713504974c4e86cd5
- MD5 d2ef048ebba9b89772b70907734cfd30
- SHA1 0cfe1b1ddae8720fa83023a74b020ddf23523c30
- SHA512 60f4a4a018572ad12df87de0e7aecdc8af1f5e9773112843ed92098a2b8cd763cc7da4149ca5cff2103d854c72d463e0f54e1837bb778be985e13193bf6ee862
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral8 behavioral9
- Target
  Coldroot/com.apple.audio.driver2.app/Contents/Resources/macicon.icns
- Size 439KB
- SHA256 0e4a43ed60cb79cdfb0eee8589625ab22aa2c847e0ed948a1dfafe2984c268fe
- MD5 1aa4be556579e664c43a67a5c762af08
- SHA1 4ba61efd2e60a5e3ac0aed3f6f769a7be6dd812a
- SHA512 9a74e6dd0caee738a2e476f61534fa123643d1468d168ca532f35b531ce414134d4f0548e15c0773806cfbc0e5d287ce1317c3f0e212348178f2e01fda344a06
- SSDEEP 6144:5vACrUXeNO2kjUoKvop5FH74RU0+6whje2ARvkZvjIVl3VuUjcLI0Z:hXOlU5ApPH7U+6ojNUvkdjInFuUjcc0
- TLSH
  T189A412D58B045578E2FC317776226CA185B33C1AD434DE0725367BF8BEB68712E602EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral11
- Target
  Coldroot/readme.txt
- Size 217B
- SHA256 dd7ff8732c236e740978f8650037cea60e5950a65a5c1b1ae88450a6b88db8ce
- MD5 cbe08fd385e66ee963b2300493b6c2ac
- SHA1 54415251750b4ab608d2273d2ae9db396251b5f8
- SHA512 ae695ae59d15ba33ddadc96cbb23f2fbffcab59f6731a62795c5569d991ccb4ab682e0e55802b6b66fa77379f4b5cff40e2a0b44aa64af149e3055a7b011a98b
- TLSH
  T10DD0A7932679B433CB54009571D6F01DD7A14D8984CB02B0D161D563855053926B1D4B
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral12 behavioral13

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

adwarediscoveryspyware

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

© 2018-2026

Terms | Privacy