c7c34389883a15928060c4ca87593e158c4e62355fb5c35eb302a7cb201e8b33

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
31/08/2023, 07:58

Target

SineeDriver-英文可执行文件(EM760)/SineeDriver-英文可执行文件(EM760)/SineeDriver_EN/Car.dll
Size

2.5MB
MD5

d76ad7f709a225fddba4af8d79d47006
SHA1

7c42331bb595d41f7acec10692110070710d6f40
SHA256

20778e4bc878569782e72cd10d8dfccad130e1280d2de5dca0e62c2ce63fb0f4
SHA512

87d739ef8b10196c4fd7acd99b1e1bd4fcde53c94ce7cd823095eb42abd9c5d9e654ec1420cf2800789f18ce779d4afe61e7765e789df4c6007301c545b2b3e3
SSDEEP

24576:aVExoT1Tj0dAXMicDK6wyM7U5tS62jBdreAPWtk125lJpiEUr5r7loUJ:auYUicjHcjlu3BIEUR7lL

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1196 wrote to memory of 1688	1196	rundll32.exe	28
PID 1196 wrote to memory of 1688	1196	rundll32.exe	28
PID 1196 wrote to memory of 1688	1196	rundll32.exe	28
PID 1196 wrote to memory of 1688	1196	rundll32.exe	28
PID 1196 wrote to memory of 1688	1196	rundll32.exe	28
PID 1196 wrote to memory of 1688	1196	rundll32.exe	28
PID 1196 wrote to memory of 1688	1196	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\SineeDriver-英文可执行文件(EM760)\SineeDriver-英文可执行文件(EM760)\SineeDriver_EN\Car.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1196
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\SineeDriver-英文可执行文件(EM760)\SineeDriver-英文可执行文件(EM760)\SineeDriver_EN\Car.dll,#1
  2⤵
  PID:1688

memory/1688-0-0x0000000010000000-0x000000001039C000-memory.dmp

Filesize
3.6MB

Download
memory/1688-1-0x0000000010000000-0x000000001039C000-memory.dmp

Filesize
3.6MB

Download
memory/1688-2-0x0000000010000000-0x000000001039C000-memory.dmp

Filesize
3.6MB

Download
memory/1688-3-0x0000000010000000-0x000000001039C000-memory.dmp

Filesize
3.6MB

Download