MalwareBazaar Database

This page shows some basic information the YARA rule Methodology_Suspicious_Shortcut_IconNotFromExeOrDLLOrICO including corresponding malware samples.

Database Entry


YARA Rule:Methodology_Suspicious_Shortcut_IconNotFromExeOrDLLOrICO
Author:@itsreallynick (Nick Carr)
Description:Detects possible shortcut usage for .URL persistence
Firstseen:2022-09-30 09:11:17 UTC
Lastseen:2026-01-28 13:58:53 UTC
Sightings:19

Malware Samples


The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter