General
- Target Sc_XLM.exe
- Size 2.4MB
- Sample260728-z58trshr2y
- SHA256 f56ea10fde19c89ab5e0507392b75c24371de5547fff9fc5732a3ff62f2505ac
- MD5 2695196f24fd6f7bf409e60616626775
- SHA1 2f3fa28724a2b7f1b4948752a04bf488103ff0a4
- SHA512 58cd30e8c8ee7068dcc5a3f1c73e7865757d2d612342195285dbcc4b00056d6e7e1c1d6eec26111de8c10257a463e7a8f6e89a1e73e584bee06b7a1e8e081818
- SSDEEP 49152:4uI2h33CtUYMWgT1Hu8x/3ok9bz4pICVmkZ866qx:45OHbYtg33bX493Z8sx
- TLSH T1ADB5D03FF28B653EE06A16367AB29110983B7A6165124C1696FCF88CCF355701E3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Sc_XLM.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Sc_XLM.exe
- Size 2.4MB
- SHA256 f56ea10fde19c89ab5e0507392b75c24371de5547fff9fc5732a3ff62f2505ac
- MD5 2695196f24fd6f7bf409e60616626775
- SHA1 2f3fa28724a2b7f1b4948752a04bf488103ff0a4
- SHA512 58cd30e8c8ee7068dcc5a3f1c73e7865757d2d612342195285dbcc4b00056d6e7e1c1d6eec26111de8c10257a463e7a8f6e89a1e73e584bee06b7a1e8e081818
- SSDEEP 49152:4uI2h33CtUYMWgT1Hu8x/3ok9bz4pICVmkZ866qx:45OHbYtg33bX493Z8sx
- TLSH T1ADB5D03FF28B653EE06A16367AB29110983B7A6165124C1696FCF88CCF355701E3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Executes a VBScript file via the Windows Script Host.