AtomLdr.dll| Category | Machine | Started | Completed |
|---|---|---|---|
| FILE | s1_win7_x6403_us | May 17, 2023, 9:31 a.m. | May 17, 2023, 9:33 a.m. |
-
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\AtomLdr.dll,AtomHelper
2068-
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\AtomLdr.dll,AtomHelper
2424
-
-
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\AtomLdr.dll,AtomSystemInstaller
2160-
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\AtomLdr.dll,AtomSystemInstaller
2416
-
-
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\AtomLdr.dll,Atom
1460-
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\AtomLdr.dll,Atom
2468
-
-
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\AtomLdr.dll,InitializeAtomSystem
2252-
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\AtomLdr.dll,InitializeAtomSystem
2408
-
-
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\AtomLdr.dll,
2344
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
| IP Address | Status | Action |
|---|---|---|
| No hosts contacted. | ||
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
| section | {u'size_of_data': u'0x00812200', u'virtual_address': u'0x00007000', u'entropy': 7.9999790704606975, u'name': u'.rsrc', u'virtual_size': u'0x00812190'} | entropy | 7.99997907046 | description | A section with a high entropy has been found | |||||||||
| entropy | 0.998188296395 | description | Overall entropy of this PE file is high | |||||||||||
| MicroWorld-eScan | Gen:Variant.Lazy.336850 |
| FireEye | Generic.mg.513eecac1e602be2 |
| CrowdStrike | win/malicious_confidence_90% (D) |
| Arcabit | Trojan.Lazy.D523D2 |
| ESET-NOD32 | a variant of Win64/Runner_AGen.A |
| APEX | Malicious |
| Cynet | Malicious (score: 100) |
| BitDefender | Gen:Variant.Lazy.336850 |
| Avast | Win64:Evo-gen [Trj] |
| Emsisoft | Gen:Variant.Lazy.336850 (B) |
| VIPRE | Gen:Variant.Lazy.336850 |
| Trapmine | malicious.moderate.ml.score |
| GData | Gen:Variant.Lazy.336850 |
| ALYac | Gen:Variant.Lazy.336850 |
| MAX | malware (ai score=84) |
| Rising | Trojan.Runner!8.93 (TFE:6:ivNoXlcNGlJ) |
| AVG | Win64:Evo-gen [Trj] |