Rundll32: The Infamous Proxy for Executing Malicious Code

Take a deeper dive into an often abused Microsoft-signed tool, the infamous rundll32.exe, which allows adversaries to execute malicious code during their offensive operations through a technique which we explain in detail

Persistent pests: A taxonomy of computer worms - Red Canary

Silvio R. (@Pinas_) / X

Windows Exploitation: rundll32.exe - Hacking Articles

System Binary Proxy Execution Rundll32, Nordic Defender

Rundll32: The Infamous Proxy for Executing Malicious Code

Bluepurple Pulse: week ending February 12th - by Ollie

Rundll32: The Infamous Proxy for Executing Malicious Code

3 Malware Loaders You Can't (Shouldn't) Ignore - ReliaQuest

System Binary Proxy Execution Rundll32, Nordic Defender

4 malicious campaigns, 13 confirmed victims, and a new wave of APT41 attacks

A taste of the latest release of QakBot

Swedish Windows Security User Group » ransomware

A taste of the latest release of QakBot

Rundll32: The Infamous Proxy for Executing Malicious Code