Source: MITRE_ATTCK
Threat actor: APT28
Affected sector: Unknown
Attack vector: Unknown Tactic
Severity: High
Confidence: High
MITRE ATT&CK techniques: T1218.011
Description:
MITRE ATT&CK technique T1218.011 (Rundll32) used by APT28. Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. [Shared Modules](https://attack.mitre.org/techniques/T1129)), may avoid trigg...