Analysis

  • max time kernel
    82s
  • max time network
    132s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230831-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/09/2023, 09:25

General

  • Target

    SineeDriver-英文可执行文件(EM760)(1)(1)/SineeDriver-英文可执行文件(EM760)(1)/SineeDriv.dll

  • Size

    40KB

  • MD5

    415ceb18b811f011229bba9b92b4ca3f

  • SHA1

    8ecf98f8adafbbc24f8f47fda94c8a8660fc9eca

  • SHA256

    5ad94c98118d8a97f27b84c8e50c911904a6debf1af4f82c24b9251ed0f2c57d

  • SHA512

    6eb2a3bbf3807981750458f8357cd2abc43741ca6834c27fcf01c4f10194a14116e330253b17dcc593e4610dd8e7f39a88ed53915b418797376b289b80e3faef

  • SSDEEP

    384:ZygPtQ/E+uiwKmHgRKnuTJrxTKdrrcvGcmlP9o4dFymYUA43iu2p0o+qi/g8Wmgu:YgPtymHglT9xTKmvOdFtnRW0onvm

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\SineeDriver-英文可执行文件(EM760)(1)(1)\SineeDriver-英文可执行文件(EM760)(1)\SineeDriv.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1316
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\SineeDriver-英文可执行文件(EM760)(1)(1)\SineeDriver-英文可执行文件(EM760)(1)\SineeDriv.dll,#1
      2⤵
        PID:1496

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads