MalwareBazaar Database

This page shows some basic information the YARA rule Methodology_Suspicious_Shortcut_IconNotFromExeOrDLLOrICO including corresponding malware samples.

Database Entry


YARA Rule:Methodology_Suspicious_Shortcut_IconNotFromExeOrDLLOrICO
Author:@itsreallynick (Nick Carr)
Description:Detects possible shortcut usage for .URL persistence
Firstseen:2022-09-30 09:11:17 UTC
Lastseen:2026-04-13 07:47:22 UTC
Sightings:26

Malware Samples


The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter