日本語のみで絞り込む

条件を指定して検索しています。すべての条件を解除する

  • 最終更新日：1年以内

    • Windows: Suspicious Rundll32 Activity

    1. https://help.fortinet.com
    2. Public_Resource_Access
    3. rules
    1. https://help.fortinet.com
    2. Public_Resource_Access
    3. rules

    2023/12/22 -Adversaries may abuse rundll32.exe to proxy execution of malicious code. Rundll32.exe is commonly associated with executing DLL payloads. ... zipfldr\.dll.*" AND ...


    Potentially Suspicious Rundll32 Activity - Tidal Cyber

    1. https://app.tidalcyber.com
    2. analytics
    1. https://app.tidalcyber.com
    2. analytics

    2024/2/12 -Detects suspicious execution of rundll32, with specific calls to some DLLs with known LOLBIN functionalities ... zipfldr.dll - RouteTheCall- CommandLine|contains ...


    Defending new vectors: Threat actors attempt SQL Server to cloud lateral ...

    1. https://www.microsoft.com
    2. security
    3. blog
    4. 2023/10/03
    1. https://www.microsoft.com
    2. security
    3. blog
    4. 2023/10/03

    2023/10/3 -Microsoft security researchers recently identified a campaign where attackers attempted to move laterally to a cloud environment through a SQL Server ...


    Onenote Malicious Attachment as Initial Vector - Logpoint

    1. https://www.logpoint.com
    2. blog
    3. onenote-malicious-atta...
    1. https://www.logpoint.com
    2. blog
    3. onenote-malicious-atta...

    2023/10/30 -PowerShell makes the remote connection to download dll file and run rundll32 to run a malicious dll for loading IcedID. Process Execution on executing Sample ...


    sql-server-abuse.md - GitHub

    1. https://github.com
    2. master
    3. Execution
    4. sql-server-abuse
    1. https://github.com
    2. master
    3. Execution
    4. sql-server-abuse

    2023/11/16 -This query detects instances of a SQL Server process launching a shell to run one or more suspicious commands. Query. DeviceProcessEvents | where Timestamp >= ...


    Short command line tips - Rob van der Woude's Scripting Pages

    1. https://www.robvanderwoude.com
    2. shorts
    1. https://www.robvanderwoude.com
    2. shorts

    2023/10/30 -RUNDLL32.EXE ZIPFLDR.DLL,RouteTheCall zipfile.ZIP, Unfortunately, there seems to be no (native) command to copy files into the .ZIP file. Notes: (1), When ...


    Inside DarkGate: Exploring the infection chain and capabilities

    1. https://www.logpoint.com
    2. blog
    3. inside-darkgate
    1. https://www.logpoint.com
    2. blog
    3. inside-darkgate

    2024/3/4 -One of the DLL files contains instructions to download the payload from the C2, so when the DLL is executed via rundll32.exe it connects to C2, and downloads ...


    Potential Masquerading as System32 DLL | Elastic Security Solution [8.13]

    1. https://www.elastic.co
    2. guide
    3. security
    4. current
    5. poten...
    1. https://www.elastic.co
    2. guide
    3. security
    4. current
    5. poten...

    2023/9/9 -Command Shell Activity Started via RunDLL32 ... zipfldr.dll", "bootsvc.dll", "halextintcpsedma.dll ... name : "DismHost.exe" and dll.path : "C:\\Windows ...


    Modify Registry, Technique T1112 - Enterprise | MITRE ATT&CK®

    1. https://attack.mitre.org
    2. techniques
    1. https://attack.mitre.org
    2. techniques

    2023/8/14 -Blue Mockingbird has used Windows Registry modifications to specify a DLL payload. ... rundll32.exe\shell\open . S0679 · Ferocious ... command line via reg.exe ...


    api/lolbas.csv

    1. https://lolbas-project.github.io
    2. api
    3. lolbas
    1. https://lolbas-project.github.io
    2. api
    3. lolbas

    2024/4/5 -... exe",".NET Tool used for updating cache files for ... rundll32.exe dfshim.dll,ShOpenVerbApplication http://www ... ZIP file from a folder in a remote drive ...


    rundll32.exe zipfldr.dllに関するQ&A（1件）

    Yahoo!知恵袋

    Q.--関連付けの変更-- WinXPです。 zipファイルをDLしようとしてクリックすると、「関連づけされたプログラムが存在しない為、「～～～zip」を開けませんでした 関連づけを変更してください...

    A.zipファイルのDLをクリックしてから、¨開く¨のではなく¨保存¨は選べないんですか？ 保存さえ出来ればデスクトップ上からの解凍が出来ると思うんですがいかがでしょうか？

    解決済み-回答：3件-2008/9/18