Analysis
-
max time kernel
140s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
17/08/2024, 07:55
Static task
static1
Behavioral task
behavioral1
Sample
PCNFO.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
PCNFO.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
THECRACK.htm
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
THECRACK.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
picallwk.exe
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
picallwk.exe
Resource
win10v2004-20240802-en
General
-
Target
PCNFO.exe
-
Size
11KB
-
MD5
878daa0df513668699b9178dfdec942b
-
SHA1
7da37418deff594fa2416304bb3d2cfb90d5061b
-
SHA256
b9172b4c3dfd36865503114aa1c9f7e51c6c3b221e2e8e040f5bdb5df6291268
-
SHA512
72e4ca1ee3f61d4993e601caa880eebbd924741aa16ffd65bd875833570f0f446457b1c84cb10bbf2261013b1552f4413007f445be963fb9f43cb6c1a9eaf6ee
-
SSDEEP
192:ntuUXLGw1BxOMK9N99PhUCtc0hhIXQHQp:tfD1raawcs6gwp
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language PCNFO.exe