91c95315fd843641a441ed6f9e5761a5b91367d06ea05bb6f4f64fef959d320c | Triage™

Login
Reports

Overview

overview

7

Static

static

3

91c95315fd...0c.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
91c95315fd843641a441ed6f9e5761a5b91367d06ea05bb6f4f64fef959d320c
Size 208KB
Sample260831-tynblaywct
SHA256 91c95315fd843641a441ed6f9e5761a5b91367d06ea05bb6f4f64fef959d320c
MD5 98fc81901bad64e9aeef494e924b968d
SHA1 3871b173affda4270762d576eed9183b006f5fe0
SHA512 de68d20f6a5125c83f2bbd29dbd8c1efa56df71c9db573c021037b984f96139002905d125a8b9ea59b9bf63b88eead4dc5e1a18f4a4e3233eb74acfe2a2f2062
SSDEEP 3072:MBG3F90IHoS/8Za6mD8mBpeNLSPnCvutaNL2lJfV05C56CdM/mgF4pLthEjQT65:f206mD8epeoPCg5zXukEjP
TLSH
T126248D06324DC403F5A70B759FD6ABA46A36FC77CBB6120FE950334E1EB12A849152F9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

91c95315fd843641a441ed6f9e5761a5b91367d06ea05bb6f4f64fef959d320c.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

discovery execution

Malware Config

Targets

- Target
  91c95315fd843641a441ed6f9e5761a5b91367d06ea05bb6f4f64fef959d320c
- Size 208KB
- SHA256 91c95315fd843641a441ed6f9e5761a5b91367d06ea05bb6f4f64fef959d320c
- MD5 98fc81901bad64e9aeef494e924b968d
- SHA1 3871b173affda4270762d576eed9183b006f5fe0
- SHA512 de68d20f6a5125c83f2bbd29dbd8c1efa56df71c9db573c021037b984f96139002905d125a8b9ea59b9bf63b88eead4dc5e1a18f4a4e3233eb74acfe2a2f2062
- SSDEEP 3072:MBG3F90IHoS/8Za6mD8mBpeNLSPnCvutaNL2lJfV05C56CdM/mgF4pLthEjQT65:f206mD8epeoPCg5zXukEjP
- TLSH
  T126248D06324DC403F5A70B759FD6ABA46A36FC77CBB6120FE950334E1EB12A849152F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

© 2018-2026

Terms | Privacy