Rundll32: The Infamous Proxy for Executing Malicious Code

Take a deeper dive into an often abused Microsoft-signed tool, the infamous rundll32.exe, which allows adversaries to execute malicious code during their offensive operations through a technique which we explain in detail

Lemon Duck brings cryptocurrency miners back into the spotlight

Rundll32: The Infamous Proxy for Executing Malicious Code

3 Malware Loaders You Can't (Shouldn't) Ignore - ReliaQuest

eSentire eSentire Threat Intelligence Malware Analysis: Raspberry…

PcShare Backdoor Attacks Targeting Windows Users with FakeNarrator Malware

Global Threat Intelligence Report April

A taste of the latest release of QakBot

Swedish Windows Security User Group » NOBELIUM

The second program that was found is rundll32exe which is a Microsoft signed

Swedish Windows Security User Group » NOBELIUM

System Binary Proxy Execution Rundll32, Nordic Defender

Windows Exploitation: rundll32.exe - Hacking Articles

3 Malware Loaders You Can't (Shouldn't) Ignore - ReliaQuest