Documents.lnk
Classification: Malicious
Documents.lnk is a trojan (application/octet-stream). Detected by 19 antivirus engines. Linked to Bazar malware. 2 sightings, last seen 2021-11-16.
Detection summary
- 19 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: BAZAR (S0534)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| BazaLoader | Abuse.ch | 2021-11-16 18:30:17 | 2021-11-16 18:30:17 | malicious-activity | S0534 Bazar |
| Generic.Malware | Abuse.ch | 2021-11-16 18:30:17 | 2021-11-16 18:30:17 | malicious-activity |
Sample information
- Filenames
- Documents.lnk
- File type
- application/octet-stream
- MD5
b106fb98efaf4d814f2984d149127f61- SHA-1
556b654929e3145402e62f001d19c998de8cfa64- SHA-256
8a03468200ecc4fcf0b2181cd3233eb0b1f68350969cf2a445580e754f74b66e- First indexed
- 2021-11-16 19:15:05
- Last updated
- 2026-08-27 20:07:15
Antivirus detections
| Engine | Detection |
|---|---|
| MicroWorld-eScan | Trojan.GenericKD.47420628 |
| Cyren | LNK/Agent.CJ |
| Sophos | Troj/LnkRun-AO |
| AhnLab-V3 | LNK/Autorun.Gen |
| MAX | malware (ai score=80) |
| VBA32 | Trojan.Link.CmdRunner |
| Zoner | Probably Heur.LNKScript |
| DrWeb | LNK.Starter.57 |
| ESET-NOD32 | LNK/Agent.MA |
| TrendMicro-HouseCall | TROJ_FRS.VSNTKH21 |
| BitDefender | Trojan.GenericKD.47420628 |
| Ad-Aware | Trojan.GenericKD.47420628 |
| Comodo | TrojWare.Win32.UMal.kvpsd@0 |
| TrendMicro | TROJ_FRS.VSNTKH21 |
| FireEye | Trojan.GenericKD.47420628 |
| Emsisoft | Trojan.GenericKD.47420628 (B) |
| GData | Trojan.GenericKD.47420628 |
| Arcabit | Trojan.Generic.D2D394D4 |
| ALYac | Trojan.GenericKD.47420628 |