SLTechnology News&Howtos › Network Security ›

Rundll32 executes js code & Win32/Poweeliks

Shulou Source: shulou.com Published: 2022-06-01 07:41:53 10月04日 Update

Reference article: http://bobao.360.cn/learning/detail/164.html

Win32/Poweeliks using this technology

Kaspersky's study of the *: http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/evolution-of-poweliks.pdf

Command line input: rundll32.exe _ javascript: "..\ mshtml,RunHTMLApplication"; alert ('foo')