Rundll32: The Infamous Proxy for Executing Malicious Code

Take a deeper dive into an often abused Microsoft-signed tool, the infamous rundll32.exe, which allows adversaries to execute malicious code during their offensive operations through a technique which we explain in detail

Swedish Windows Security User Group » NOBELIUM

The second program that was found is rundll32exe which is a Microsoft signed

3 Malware Loaders You Can't (Shouldn't) Ignore - ReliaQuest

Rundll32: The Infamous Proxy for Executing Malicious Code

Rundll32: The Infamous Proxy for Executing Malicious Code

MysterySnail Attack Detection - SOC Prime

Rundll32 - Red Team Notes 2.0

eSentire eSentire Threat Intelligence Malware Analysis: Raspberry…

themed campaigns of Lazarus in the Netherlands and Belgium

System Binary Proxy Execution Rundll32, Nordic Defender

Rundll32: The Infamous Proxy for Executing Malicious Code

Cybereason auf LinkedIn: Rundll32: The Infamous Proxy for Executing Malicious Code

System Binary Proxy Execution Rundll32, Nordic Defender

Emulating North Korean Adversary BlueNoroff - AttackIQ