Zvernennya.docx.lnk
Classification: Malicious
Zvernennya.docx.lnk is a trojan (application/x-ms-shortcut). Detected by 31 antivirus engines. Linked to Kobalos malware.
Detection summary
- 31 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: KOBALOS (S0641)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Kobalos | MalwareBazaar Abuse.ch | 2025-06-05 15:32:45 | 2025-06-05 15:32:45 | malicious-activity | S0641 Kobalos |
Sample information
- Filenames
- Zvernennya.docx.lnk
- File type
- application/x-ms-shortcut
- MD5
3f8aaf6a9ca76b90859c00b9a0c1da18- SHA-1
36d2ec81d2347a3b53cdad5f2098f50660f4bd60- SHA-256
80318e73a2c37c61bedf5f2aa75734141cc3fb15d7f96c7a41d7f9e1abef258e- First indexed
- 2025-06-05 17:19:24
- Last updated
- 2026-10-17 00:42:00
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Agent.LNK.Gen |
| AVG | LNK:Agent-LO [Drp] |
| Arcabit | Trojan.LNK.Heur.5 |
| Avast | LNK:Agent-LO [Drp] |
| BitDefender | Trojan.LNK.Heur.5 |
| CTX | lnk.trojan.powecom |
| ESET-NOD32 | PowerShell/TrojanDownloader.Agent.MQG trojan |
| Emsisoft | Trojan.LNK.Heur.5 (B) |
| Fortinet | LNK/Agent.PTW!tr |
| GData | Trojan.LNK.Heur.5 |
| Detected | |
| Ikarus | Trojan.SuspectCRC |
| Kaspersky | HEUR:Trojan.Multi.Powecom.a |
| Kingsoft | Script.Troj.lnk.2051021 |
| Lionic | Trojan.WinLNK.Powecom.4!c |
| McAfeeD | ti!80318E73A2C3 |
| MicroWorld-eScan | Trojan.LNK.Heur.5 |
| Microsoft | Trojan:Win32/WinLNK.MAD!MTB |
| Skyhigh | Downloader-FCTT!3F8AAF6A9CA7 |
| Sophos | Troj/LnkObf-T |
| Symantec | CL.Downloader!gen11 |
| Tencent | Win32.Trojan-Downloader.Downloader.Eajl |
| TrellixENS | Downloader-FCTT!3F8AAF6A9CA7 |
| TrendMicro | HEUR_LNKEXEC.A |
| TrendMicro-HouseCall | HEUR_LNKEXEC.A |
| VIPRE | Trojan.LNK.Heur.5 |
| VirIT | Trojan.LNK.Heur.A |
| ZoneAlarm | Troj/LnkObf-T |
| Zoner | Probably Heur.LNKScript |
| alibabacloud | Trojan:Win/Powecom.a |
| huorong | TrojanDownloader/LNK.NetLoader.af |