How LNK Files Are Abused by Threat Actors
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Ip Addresses - T1590.005 Link Target - T1608.005 Malicious Link - T1204.001 Malware - T1587.001 Malware - T1588.001 Mshta - T1218.005 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Rundll32 - T1218.011 Tool - T1588.002 Mshta - T1170 Powershell - T1086 Rundll32 - T1085
Show in Graph
Common Information
Type Value
UUID f6ae9773-02b7-4d28-aedd-a1ef6aa5ca03
Fingerprint 95c23a5227778e01
Analysis status DONE
Considered CTI value 0
Text language
Published Nov. 10, 2022, 1:31 p.m.
Added to db Oct. 24, 2023, 1:35 p.m.
Last updated Nov. 18, 2024, 1:25 p.m.
Headline How LNK Files Are Abused by Threat Actors
Title How LNK Files Are Abused by Threat Actors
Detected Hints/Tags/Attributes 49/2/6
Source URLs
Redirection Url
Details Source https://intezer.com/blog/malware-analysis/how-threat-actors-abuse-lnk-files/
Details Redirection https://www.intezer.com/blog/malware-analysis/how-threat-actors-abuse-lnk-files/
URL Provider
Details Provider Source level domain
Details intezer.com www.intezer.com
Details intezer.com intezer.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 140 ✔ Intezer https://intezer.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 2 
news-wellness.com
Details File 1212 
powershell.exe
Details File 4 
d.png
Details File 23 
test.dll
Details File 1021 
rundll32.exe
Details Url 2 
https://news-wellness.com/5mvhfo8bndub/d.png