Churner.dll| Category | Machine | Started | Completed |
|---|---|---|---|
| FILE | s1_win7_x6403_us | July 21, 2021, 9:37 a.m. | July 21, 2021, 9:39 a.m. |
-
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Churner.dll,
1640 -
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Churner.dll,biocpl
564-
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Churner.dll,biocpl
1324
-
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
| IP Address | Status | Action |
|---|---|---|
| No hosts contacted. | ||
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
| section | .gfids |
| CrowdStrike | win/malicious_confidence_90% (W) |
| Webroot | W32.Trojan.Gen |
| section | {u'size_of_data': u'0x00004000', u'virtual_address': u'0x00002000', u'entropy': 7.174801126978588, u'name': u'.rdata', u'virtual_size': u'0x00003e68'} | entropy | 7.17480112698 | description | A section with a high entropy has been found | |||||||||
| entropy | 0.8 | description | Overall entropy of this PE file is high | |||||||||||