LNK Metadata
Brief
I ran across this Ctrl-Alt-Intel blog post today, which discusses RustGate v2, and noticed that for all of what was addressed in the blog, there wasn't a great deal of content regarding the delivery method, the LNK file itself. Figure 1 illustrates what the blog states regarding LNK file metadata, beyond the embedded command line.
Figure 1: Blog excerpt
Okay, but what else can we see from the LNK structure itself? What other IOCs or intelligence can we derive from the file?