Analysis
-
max time kernel
122s -
max time network
131s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
-
submitted
01/09/2023, 09:25
General
-
Target
SineeDriver-英文可执行文件(EM760)(1)(1)/SineeDriver-英文可执行文件(EM760)(1)/SineeDriv.xlsx
-
Size
19KB
-
MD5
3b70bd7a2fd221492b56bfc7d0f2396a
-
SHA1
f67fd9464a4c03bdf049402d759e7a7af21e557c
-
SHA256
293297002c0d62a7d49586d89987958156d9023b2996fbe1a966b8522314ae5a
-
SHA512
1d09f3dc2a2b90f381c7402a6aa2dd70fcf93747da610264e0d99db418987885f35cbca323b17bad7c1baeb2f77cb2317f77bf7663e7524d53a29243946e6114
-
SSDEEP
384:lNfbdmTqyzx8Nxhq4da2XDpX53v2cyHxQC1Or:lQxt0xhDda2lJuZG
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\SineeDriver-英文可执行文件(EM760)(1)(1)\SineeDriver-英文可执行文件(EM760)(1)\SineeDriv.xlsx"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB