ì´ìì©.lnk
Classification: Malicious
ì´ìì©.lnk is a malicious file sample. Linked to Rokrat malware. Reported by 2 threat sources, last seen 2026-03-03. Detected by 47 antivirus engines.
Detection summary
- 47 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: ROKRAT (S0240)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ROKRAT | MalwarePatrol | 2026-03-03 18:32:25 | 2026-03-03 18:32:25 | malicious-activity | S0240 ROKRAT |
| Generic.Malware | MalwareBazaar Abuse.ch | 2024-02-22 20:00:41 | 2024-02-22 20:00:41 | malicious-activity |
Tags
rokratSample information
- Filenames
- ì´ìì©.lnk
- File type
- application/octet-stream
- MD5
acf4085b2fa977fc1350f0ddc2710502- SHA-1
7155d89bae9acd67f5d8cdf651b73ee6b54262c3- SHA-256
cbc777d1e018832790482e6fd82ab186ac02036c231f10064b14ff1d81832f13- First indexed
- 2024-02-22 20:18:28
- Last updated
- 2026-04-17 01:04:15
Antivirus detections
| Engine | Detection |
|---|---|
| AVG | LNK:Agent-HN [Trj] |
| AhnLab-V3 | LNK/Runner.S1 |
| Arcabit | Heur.BZC.YAX.Boxter.819.F5CCFB4B |
| Avast | LNK:Agent-HN [Trj] |
| BitDefender | Heur.BZC.YAX.Boxter.819.F5CCFB4B |
| Emsisoft | Heur.BZC.YAX.Boxter.819.F5CCFB4B (B) |
| FireEye | Heur.BZC.YAX.Boxter.819.F5CCFB4B |
| GData | Heur.BZC.YAX.Boxter.819.F5CCFB4B |
| Detected | |
| Kaspersky | HEUR:Trojan.WinLNK.Powecod.c |
| Kingsoft | Script.Troj.BigLnk.22142 |
| MAX | malware (ai score=84) |
| Rising | Trojan.Agent/LNK!1.AA03 (CLASSIC) |
| SentinelOne | Static AI - Suspicious LNK |
| Skyhigh | BehavesLike.Dropper.rx |
| Sophos | Troj/LnkDrop-M |
| Symantec | Scr.Heuristic!gen20 |
| VBA32 | Trojan.Link.Crafted |
| VIPRE | Heur.BZC.YAX.Boxter.819.F5CCFB4B |
| ZoneAlarm | HEUR:Trojan.WinLNK.Powecod.c |
| ALYac | Trojan.Agent.LNK.Gen |
| Arcabit | CMD:Heur.BZC.YAX.Pantera.190.95E1BBFB |
| Avira | LNK/Susp.Gen |
| BitDefender | CMD:Heur.BZC.YAX.Pantera.190.95E1BBFB |
| Bkav | LNK.ScriptQH.Trojan |
| CTX | lnk.trojan.powecod |
| Cynet | Malicious (score: 99) |
| DrWeb | Trojan.MulDrop26.26931 |
| ESET-NOD32 | LNK/TrojanDropper.Agent.DT trojan |
| Emsisoft | CMD:Heur.BZC.YAX.Pantera.190.95E1BBFB (B) |
| F-Secure | Malware.LNK/Susp.Gen |
| Fortinet | LNK/MalwThreat!0502FT |
| GData | CMD:Heur.BZC.YAX.Pantera.190.95E1BBFB |
| Lionic | Trojan.WinLNK.Powecod.4!c |
| Microsoft | Trojan:Win32/WinLNK.HNDC!MTB |
| NANO-Antivirus | Trojan.Script.Dropper.lcqwng |
| Sophos | Troj/LnkRun-DC |
| Tencent | Win32.Trojan.Powecod.Kcnw |
| TrellixENS | LNK/Agent!ACF4085B2FA9 |
| TrendMicro | Trojan.LNK.POWLOAD.EC |
| TrendMicro-HouseCall | Trojan.LNK.POWLOAD.EC |
| VIPRE | CMD:Heur.BZC.YAX.Pantera.190.95E1BBFB |
| ViRobot | LNK.S.Agent.54533590 |
| Zillya | Trojan.Powecod.Script.761 |
| ZoneAlarm | Troj/LnkRun-DC |
| alibabacloud | Trojan[dropper]:Win/Leonem.Gen |
| huorong | Trojan/LNK.Agent.aet |