Rundll32: The Infamous Proxy for Executing Malicious Code

Take a deeper dive into an often abused Microsoft-signed tool, the infamous rundll32.exe, which allows adversaries to execute malicious code during their offensive operations through a technique which we explain in detail

Stealth Falcon preying over Middle Eastern skies with Deadglyph

System Binary Proxy Execution Rundll32, Nordic Defender

Lemon Duck brings cryptocurrency miners back into the spotlight

Rundll32: The Infamous Proxy for Executing Malicious Code

Zloader Installs Remote Access Backdoors and Delivers Cobalt Strike – Sophos News

themed campaigns of Lazarus in the Netherlands and Belgium

Rundll32: The Infamous Proxy for Executing Malicious Code

The second program that was found is rundll32exe which is a Microsoft signed

Rundll32: The Infamous Proxy for Executing Malicious Code

A taste of the latest release of QakBot

The second program that was found is rundll32exe which is a Microsoft signed

A Survey on the Evolution of Fileless Attacks and Detection Techniques - ScienceDirect

Rundll32: The Infamous Proxy for Executing Malicious Code