LNK Parser

Reported Context (1)

public domain to parse and analyze the LNK structure. Google provides a free command line tool called “LNK Parser”, which we are going to use in this blog to demonstrate the examples, but there are other options like Talos Uses LNK Metadata to Track Malware Campaigns and Link Threat Actors

CVE (1)

Malware (6)

People (1)

Threat Actors (2)

MITRE ATT&CK (3)

Vendors (2)

Products (10)

Tools (12)

Countries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.