Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
31/08/2023, 09:04
General
-
Target
SineeDriver-英文可执行文件(EM760)/SineeDriver-英文可执行文件(EM760)/SineeDriver_EN/Car.exe
-
Size
5.9MB
-
MD5
ceb803903878885cf196976ec8f9283a
-
SHA1
f2293478dac8cd6bdfc7b7045bfb378744f94f63
-
SHA256
156e1b595101685ed71cf2d05a42a7af64a5bc060cd015fbc6c083a5dc83e2c5
-
SHA512
234af28360e74b2b7decb31ba262cbad29f917c092e3b22904523acd30bc231ea349ba54efc26ed2d90437a1ab1330331113a142aee21800502add8a708d89f2
-
SSDEEP
98304:80egrtJq5fiaRnPcoDobkbVGaDhpVzAbLr5TrIpQpYRFCVNXxf7aUIy:80egq5fio/DC6BEb35TrIpwKid7hI
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SineeDriver-英文可执行文件(EM760)\SineeDriver-英文可执行文件(EM760)\SineeDriver_EN\Car.exe"C:\Users\Admin\AppData\Local\Temp\SineeDriver-英文可执行文件(EM760)\SineeDriver-英文可执行文件(EM760)\SineeDriver_EN\Car.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2140 -s 7362⤵
- Program crash
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.9MB
-
Filesize
6.0MB
-
Filesize
256KB
-
Filesize
4KB
-
Filesize
15.8MB
-
Filesize
32KB
-
Filesize
80KB
-
Filesize
48KB
-
Filesize
6.9MB
-
Filesize
256KB