IcedID | Detection.FYI

IcedID Malware Suspicious Single Digit DLL Execution Via Rundll32

Sep 7, 2023 · attack.defense_evasion attack.t1218.011 detection.emerging_threats ·
Share on:

Detects RunDLL32.exe executing a single digit DLL named "1.dll" with the export function "DllRegisterServer". This behaviour was often seen used by malware and especially IcedID

Read More