Rundll32 Internet Connection (cdc8da7d-c303-42f8-b08c-b4ab47230263)

Detects a rundll32 that communicates with public IP addresses

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Rundll32 Internet Connection (cdc8da7d-c303-42f8-b08c-b4ab47230263)	Sigma-Rules	Rundll32 - T1218.011 (045d0922-2310-4e60-b5e4-3302302cb3c5)	Attack Pattern	1
System Binary Proxy Execution - T1218 (457c7820-d331-465a-915e-42f85500ccc4)	Attack Pattern	Rundll32 - T1218.011 (045d0922-2310-4e60-b5e4-3302302cb3c5)	Attack Pattern	2