Common Information
| Type | Value |
|---|---|
| Value |
rundll32.exe |
| Category | |
| Type | File |
| Misp Type | |
| Description |
| Details | Published | Attributes | CTI | Title | ||
|---|---|---|---|---|---|---|
| Details | 2024-05-31 | 166 | Emerging Threat: Inside Forest Blizzard's New Arsenal | |||
| Details | Website | 2024-05-16 | 73 | Spring Cleaning with LATRODECTUS: A Potential Replacement for ICEDID — Elastic Security Labs | ||
| Details | Website | 2024-05-14 | 4 | ReversingLabs Search Extension for Splunk Enterprise | ||
| Details | Website | 2024-05-01 | 3 | Kapeka: A new toolkit in Arsenal of SandStorm | ||
| Details | 2024-04-29 | 23 | APT44 Report | |||
| Details | Website | 2024-04-25 | 197 | Black Hat SEO Leveraged to Distribute Malware | ||
| Details | Website | 2024-04-24 | 180 | [QuickNote] Qakbot 5.0 – Decrypt strings and configuration | ||
| Details | Website | 2024-04-23 | 163 | GuptiMiner: Hijacking Antivirus Updates for Distributing Backdoors and Casual Mining - Avast Threat Labs | ||
| Details | 2024-04-17 | 161 | Managed Detection and Response | |||
| Details | Website | 2024-04-04 | 13 | Qakbot Strikes Back: Understanding the Threat | Binary Defense | ||
| Details | 2024-04-03 | 22 | Microsoft Word - Active Adversary Report 2024-01.docx | |||
| Details | Website | 2024-04-01 | 124 | From OneNote to RansomNote: An Ice Cold Intrusion | ||
| Details | 2024-03-13 | 283 | THREAT | |||
| Details | Website | 2024-03-11 | 9 | Threat hunting for signs of credential dumping - Threat hunting with hints of incident response | ||
| Details | Website | 2024-03-06 | 75 | Unveiling Earth Kapre aka RedCurl’s Cyberespionage Tactics With Trend Micro MDR, Threat Intelligence | ||
| Details | Website | 2024-03-06 | 75 | Unveiling Earth Kapre aka RedCurl’s Cyberespionage Tactics With Trend Micro MDR, Threat Intelligence | ||
| Details | 2024-03-05 | 207 | A Comprehensive Overview on Stealer Malware Families | |||
| Details | Website | 2024-03-02 | 22 | Kimsuky APT Analysis 1 | ||
| Details | 2024-03-01 | 207 | A Comprehensive Overview on Stealer Malware Families | |||
| Details | Website | 2024-02-28 | 47 | New Malicious PyPI Packages used by Lazarus - JPCERT/CC Eyes | ||
| Details | Website | 2024-02-27 | 72 | Threat Actor Groups, Including Black Basta, are Exploiting Recent ScreenConnect Vulnerabilities | ||
| Details | Website | 2024-02-27 | 73 | Threat Actor Groups, Including Black Basta, are Exploiting Recent ScreenConnect Vulnerabilities | ||
| Details | Website | 2024-02-16 | 1 | 보안 프로그램 설치 과정에서 감염되는 TrollAgent (Kimsuky 그룹) - ASEC | ||
| Details | 2024-02-14 | 56 | Threat Insights Report | |||
| Details | Website | 2024-02-13 | 38 | CVE-2024-21412: Water Hydra Targets Traders with Microsoft Defender SmartScreen Zero-Day |