Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    31/08/2023, 08:58

General

  • Target

    SineeDriver-英文可执行文件(EM760)/SineeDriver-英文可执行文件(EM760)/SineeDriver_EN/Car.dll

  • Size

    44KB

  • MD5

    d9f9725e697f003ac1b5cd46acf5cc25

  • SHA1

    29ed1d475f4b59610ec2022cebaab45b720e9b2f

  • SHA256

    d92415df07bd134677c231fab20c943c9cb56120f04787595361576195b9360c

  • SHA512

    46c16c29b0e89c6dd6d274d55ebdaa9a59a9af345e5c623052ef81a46521ddf075f84b918aa85acbe846ee019a8ebc15686518fa7b704c0b3d404b4c67dba72d

  • SSDEEP

    768:75KtjqqFj0oNefS4Y5PFC7cTVczn0JWscTWEukhVDa7WaojscYrsu:75Kt+qFj04efS44PFC7cTVczn0JWscTD

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\SineeDriver-英文可执行文件(EM760)\SineeDriver-英文可执行文件(EM760)\SineeDriver_EN\Car.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1516
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\SineeDriver-英文可执行文件(EM760)\SineeDriver-英文可执行文件(EM760)\SineeDriver_EN\Car.dll,#1
      2⤵
        PID:2292

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads