Improved scripts in .lnk files now deliver Kovter in addition to Locky - Microsoft Security Blog
Tags
attack-pattern: Direct Domains - T1583.001 Domains - T1584.001 Malicious File - T1204.002 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Software - T1592.002 Powershell - T1086 Scripting - T1064 Scripting
Show in Graph
Common Information
Type Value
UUID 9c1d328d-3fb0-49b2-9b7b-625faac3cf41
Fingerprint 84c12d50a53e66ca
Analysis status DONE
Considered CTI value 0
Text language
Published Feb. 2, 2017, 4:05 p.m.
Added to db Jan. 18, 2023, 9:19 p.m.
Last updated Sept. 1, 2024, 11:23 p.m.
Headline Improved scripts in .lnk files now deliver Kovter in addition to Locky
Title Improved scripts in .lnk files now deliver Kovter in addition to Locky - Microsoft Security Blog
Detected Hints/Tags/Attributes 48/1/0
Source URLs
Redirection Url
Details Source https://cloudblogs.microsoft.com/microsoftsecure/2017/02/02/improved-scripts-in-lnk-files-now-deliver-kovter-in-addition-to-locky/
URL Provider
Details Provider Source level domain
Details microsoft.com cloudblogs.microsoft.com