General
- Target 19092026_1608_18092026_IMG_20260917_073802.lnk.zip
- Size 31KB
- Sample260919-tlfqzsshph
- SHA256 fca35983d3449e6c851c07992be6c53b0f1544e0828c9aa1b6e4ced3e835936e
- MD5 1dbb125919f4f5f16bb1bcb440265368
- SHA1 f1002d840dfac881e4f1e3f1f2a5fb4154d68bb6
- SHA512 1338c52c3475fac27ca804c22f2e2c119c899fb1b3e6801c530166c968b5e46602ab52c3f178fce7f5d9d9cd4512df88efd752fb94728ddd92f10382c4e8067f
- SSDEEP 768:WWymx89+10BuomqFMZ1AG/Sf5SgwbWkX0137QQoBSD83V:Wfcad7FIHxWkXqrIBECV
- TLSH T17DE2F239B96362D5DED36EEB5D7D417B2308B8D209DD1FAE05CF2489F2880A085CA19C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260917_073802.lnk
Resource
win10v2004-20260911-en
6 signatures
300 seconds
Behavioral task
behavioral2
Sample
IMG_20260917_073802.lnk
Resource
win11ltsc2024-20260911-en
5 signatures
300 seconds
Malware Config
Extracted
Language
-
ps1
Deobfuscated
Source
URLs
-
exe.dropper
https://szhengfa.com/?e=q
Targets
-
- Target IMG_20260917_073802.lnk
- Size 2KB
- SHA256 89da8dba7377cc6f1fda0580129fc62215527e7c6249eb3a807114bfaf91f685
- MD5 aeb453d0938fe8e638adf634e274e4d2
- SHA1 e4df3cb77f2cbcc3f02062800b41562ef84eafd0
- SHA512 09a5d79a817d65479f71df693b2728908806c54c0561ac19e43b6deaa114cea79b546b555480a2c068d03eb5eae159f8593eb0fd6458d951a9a7ee2189fbc328
- TLSH T11F517A5127F94708E2F64F3DBC7EA2519876B914ED12C7CD1250A05E68B0618E93AB3F
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.