Create malicious .LNK file
Tactic: Persistence
APT29 spearphishing used .LNK files to trick a user into executing malware. This procedure executes SeaDuke, a UPX packed Python malware.
View Command
To view this TTPs command, you must be logged in with a professional or enterprise license.
LoginTest this TTP
Download Operator (1.7.1)
Test this TTP using one of our Operator chainsEmulating Cozy Bear's 2016 Democratic National Committee hack.
APT29 Democratic National Committee
2022-03-01
Follow @preludeorg on Twitter for new chains and more.
Join the Prelude Discord to discuss chains and more.
Keep up to date with code changes and community activity on Github