Category | Machine | Started | Completed |
---|---|---|---|
FILE | s1_win7_x6401 | March 12, 2022, 10:27 p.m. | March 12, 2022, 10:50 p.m. |
-
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\cat.php.dll,
2872 -
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\cat.php.dll,zFijxQxKeyxOddj
2788-
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\cat.php.dll,zFijxQxKeyxOddj
2944
-
Name | Response | Post-Analysis Lookup |
---|---|---|
benokij.com | 139.60.161.165 |
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
resource name | РОТТЕАВУ |
section | {u'size_of_data': u'0x0004a000', u'virtual_address': u'0x000af000', u'entropy': 7.8488838296558034, u'name': u'.rsrc', u'virtual_size': u'0x00049eac'} | entropy | 7.84888382966 | description | A section with a high entropy has been found | |||||||||
entropy | 0.302194997448 | description | Overall entropy of this PE file is high |
dead_host | 139.60.161.165:443 |