cee2442ce10695e29830a77d38d4af1e24d6881203743664abc4ad9a8c97c0f2

Analysis

max time kernel
300s
max time network
301s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
27-05-2024 09:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cee2442ce10695e29830a77d38d4af1e24d6881203743664abc4ad9a8c97c0f2.exe
Size

858KB
MD5

af1cda8e5e877ddf2f2be8d013dfc88e
SHA1

38a5c4e9d41fad839958b8bdb6300e9e0354df38
SHA256

cee2442ce10695e29830a77d38d4af1e24d6881203743664abc4ad9a8c97c0f2
SHA512

31becbaa27e1f10ab4d14f14849582b13c3f5582fc9d52a2aed22afdccd2cf6d6dc517d58c435c977fd8035538886c2dc728ca37b874ad8a596753ee5ed2df72
SSDEEP

12288:WUgOJ32ppwgHHMhTtlAsauEpGyKo3wlxaF1Fh1V+OGkgT:b32p+gHHMhRyL2yL+xuf/V+OfgT

Score

7^/10

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

Processes:

cee2442ce10695e29830a77d38d4af1e24d6881203743664abc4ad9a8c97c0f2.exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation	cee2442ce10695e29830a77d38d4af1e24d6881203743664abc4ad9a8c97c0f2.exe

C:\Users\Admin\AppData\Local\Temp\cee2442ce10695e29830a77d38d4af1e24d6881203743664abc4ad9a8c97c0f2.exe
"C:\Users\Admin\AppData\Local\Temp\cee2442ce10695e29830a77d38d4af1e24d6881203743664abc4ad9a8c97c0f2.exe"
1⤵
- Checks computer location settings
PID:3892

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads