MalwareBazaar Database

This page shows some basic information the YARA rule Methodology_Suspicious_Shortcut_IconNotFromExeOrDLLOrICO including corresponding malware samples.

Database Entry


YARA Rule:Methodology_Suspicious_Shortcut_IconNotFromExeOrDLLOrICO
Author:@itsreallynick (Nick Carr)
Description:Detects possible shortcut usage for .URL persistence
Firstseen:2022-09-30 09:11:17 UTC
Lastseen:2026-03-02 14:06:35 UTC
Sightings:25

Malware Samples


The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter