General
- Target xmcl.appinstaller
- Size 1024B
- Sample260805-ss3nnazdpa
- SHA256 90a79fdffdb7e529c0611f11e064dcb1830cc2a628adcee71dad8d1c3b8e61c9
- MD5 90fc324a49bff53d954ef91fb6b23160
- SHA1 c987804ec2a6c98122094ecaec25e2715a42383e
- SHA512 4dae223473a93a1ed335202431ded8d910909a7ea25466ed959680cb1cf41a6dbffa236dd877da81ed00b5d103369e3bcad41f0d9bdaa101326503d776521fba
- TLSH T17011C9460AE162B1772CC2AD921506182366239706EEC4EAFCDE5A789F4A04112C33B7
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
xmcl.xml
Resource
win10v2004-20260513-en
5 signatures
900 seconds
Behavioral task
behavioral2
Sample
xmcl.xml
Resource
win11ltsc2024-20260709-en
14 signatures
900 seconds
Malware Config
Targets
-
- Target xmcl.appinstaller
- Size 1024B
- SHA256 90a79fdffdb7e529c0611f11e064dcb1830cc2a628adcee71dad8d1c3b8e61c9
- MD5 90fc324a49bff53d954ef91fb6b23160
- SHA1 c987804ec2a6c98122094ecaec25e2715a42383e
- SHA512 4dae223473a93a1ed335202431ded8d910909a7ea25466ed959680cb1cf41a6dbffa236dd877da81ed00b5d103369e3bcad41f0d9bdaa101326503d776521fba
- TLSH T17011C9460AE162B1772CC2AD921506182366239706EEC4EAFCDE5A789F4A04112C33B7
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.