MalwareBazaar Database

This page shows some basic information the YARA rule OLE_LNK_InternetExplorer_IDLIST_Suspicious including corresponding malware samples.

Database Entry

YARA Rule:OLE_LNK_InternetExplorer_IDLIST_Suspicious
Create hunting rule
Author:node5
Description:Detects OLE-embedded LNK with Internet Explorer IDLIST containing suspicious WebDAV/UNC/file:// strings within item boundaries
Firstseen:2026-03-11 08:42:27 UTC
Lastseen:2026-03-12 07:29:18 UTC
Sightings:2

Malware Samples

The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter