MalwareBazaar Database

This page shows some basic information the YARA rule OLE_LNK_InternetExplorer_IDLIST_Suspicious including corresponding malware samples.

Database Entry

YARA Rule:OLE_LNK_InternetExplorer_IDLIST_Suspicious
Create hunting rule
Author:node5
Description:Detects OLE-embedded LNK with Internet Explorer IDLIST containing suspicious WebDAV/UNC/file:// strings within item boundaries
Firstseen:2026-03-11 08:42:27 UTC
Lastseen:2026-07-09 08:02:25 UTC
Sightings:6

Malware Samples

The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter