Analysis

  • max time kernel
    140s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    17/08/2024, 07:55

General

  • Target

    PCNFO.exe

  • Size

    11KB

  • MD5

    878daa0df513668699b9178dfdec942b

  • SHA1

    7da37418deff594fa2416304bb3d2cfb90d5061b

  • SHA256

    b9172b4c3dfd36865503114aa1c9f7e51c6c3b221e2e8e040f5bdb5df6291268

  • SHA512

    72e4ca1ee3f61d4993e601caa880eebbd924741aa16ffd65bd875833570f0f446457b1c84cb10bbf2261013b1552f4413007f445be963fb9f43cb6c1a9eaf6ee

  • SSDEEP

    192:ntuUXLGw1BxOMK9N99PhUCtc0hhIXQHQp:tfD1raawcs6gwp

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\PCNFO.exe
    "C:\Users\Admin\AppData\Local\Temp\PCNFO.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2968

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2968-0-0x0000000000400000-0x000000000040B000-memory.dmp

          Filesize

          44KB

        • memory/2968-4-0x0000000000400000-0x000000000040B000-memory.dmp

          Filesize

          44KB

        • memory/2968-5-0x0000000000400000-0x000000000040B000-memory.dmp

          Filesize

          44KB

        • memory/2968-6-0x0000000000400000-0x000000000040B000-memory.dmp

          Filesize

          44KB

        • memory/2968-7-0x0000000000400000-0x000000000040B000-memory.dmp

          Filesize

          44KB

        • memory/2968-8-0x0000000000400000-0x000000000040B000-memory.dmp

          Filesize

          44KB

        • memory/2968-9-0x0000000000400000-0x000000000040B000-memory.dmp

          Filesize

          44KB

        • memory/2968-10-0x0000000000400000-0x000000000040B000-memory.dmp

          Filesize

          44KB

        • memory/2968-11-0x0000000000400000-0x000000000040B000-memory.dmp

          Filesize

          44KB

        • memory/2968-12-0x0000000000400000-0x000000000040B000-memory.dmp

          Filesize

          44KB

        • memory/2968-13-0x0000000000400000-0x000000000040B000-memory.dmp

          Filesize

          44KB

        • memory/2968-14-0x0000000000400000-0x000000000040B000-memory.dmp

          Filesize

          44KB

        • memory/2968-15-0x0000000000400000-0x000000000040B000-memory.dmp

          Filesize

          44KB

        • memory/2968-16-0x0000000000400000-0x000000000040B000-memory.dmp

          Filesize

          44KB

        • memory/2968-17-0x0000000000400000-0x000000000040B000-memory.dmp

          Filesize

          44KB

        • memory/2968-18-0x0000000000400000-0x000000000040B000-memory.dmp

          Filesize

          44KB