Rundll32: The Infamous Proxy for Executing Malicious Code

Take a deeper dive into an often abused Microsoft-signed tool, the infamous rundll32.exe, which allows adversaries to execute malicious code during their offensive operations through a technique which we explain in detail

The Windows Process Journey: by Dr. Shlomi Boutnaru, PDF, Windows Registry

Windows Exploitation: rundll32.exe - Hacking Articles

FireEye Uncovers CVE-2017-8759: Zero-Day Used in the Wild to Distr - exploit database

The second program that was found is rundll32exe which is a Microsoft signed

LOLBAS-Project.github.io/_lolbas/Binaries/Rundll32.md at master · LOLBAS-Project/LOLBAS-Project.github.io · GitHub

PcShare Backdoor Attacks Targeting Windows Users with FakeNarrator Malware

Rundll32: The Infamous Proxy for Executing Malicious Code

Persistent pests: A taxonomy of computer worms - Red Canary

Threat Group Assessment: Turla (aka Pensive Ursa)

Swedish Windows Security User Group » ransomware

Global Threat Intelligence Report April

Rundll32 Injected with mining malware - Microsoft Community