IcedID | Detection.FYI

IcedID Malware Suspicious Single Digit DLL Execution Via Rundll32

Aug 12, 2024 · attack.defense-evasion attack.t1218.011 detection.emerging-threats ·
Share on:

Detects RunDLL32.exe executing a single digit DLL named "1.dll" with the export function "DllRegisterServer". This behaviour was often seen used by malware and especially IcedID

Read More