.. /Shell32.dll
Star

Execute (DLL, EXE, CMD)

Windows Shell Common Dll

Paths:

Resources:

Acknowledgements:

Detections:

Execute

  1. Launch a DLL payload by calling the Control_RunDLL function.

    rundll32.exe shell32.dll,Control_RunDLL {PATH_ABSOLUTE:.dll}
    Use case
    Load a DLL payload.
    Privileges required
    User
    Operating systems
    Windows 10, Windows 11
    ATT&CK® technique
    T1218.011
    Tags
    Execute: DLL

  2. Launch an executable by calling the ShellExec_RunDLL function.

    rundll32.exe shell32.dll,ShellExec_RunDLL {PATH:.exe}
    Use case
    Run an executable payload.
    Privileges required
    User
    Operating systems
    Windows 10, Windows 11
    ATT&CK® technique
    T1218.011
    Tags
    Execute: EXE

  3. Launch command line by calling the ShellExec_RunDLL function.

    rundll32 SHELL32.DLL,ShellExec_RunDLL {PATH:.exe} {CMD:args}
    Use case
    Run an executable payload.
    Privileges required
    User
    Operating systems
    Windows 10, Windows 11
    ATT&CK® technique
    T1218.011
    Tags
    Execute: CMD