Rundll32: The Infamous Proxy for Executing Malicious Code

Take a deeper dive into an often abused Microsoft-signed tool, the infamous rundll32.exe, which allows adversaries to execute malicious code during their offensive operations through a technique which we explain in detail

Hackers use a new technique in malspam campaigns to disable Macro security warnings in weaponized docs

Rundll32: The Infamous Proxy for Executing Malicious Code

The second program that was found is rundll32exe which is a Microsoft signed

Lemon Duck brings cryptocurrency miners back into the spotlight

themed campaigns of Lazarus in the Netherlands and Belgium

A Survey on the Evolution of Fileless Attacks and Detection Techniques - ScienceDirect

System Binary Proxy Execution Rundll32, Nordic Defender

eSentire eSentire Threat Intelligence Malware Analysis: Raspberry…

System Binary Proxy Execution Rundll32, Nordic Defender

Rundll32: The Infamous Proxy for Executing Malicious Code

Emulating the Infamous Modular Banking Trojan BokBot - AttackIQ