Analysis
- max time kernel
135s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
19/01/2024, 11:57
General
- Target $TEMP/sobar.exe
- Size 468KB
- Sample240119-n4rnbaddbp
- SHA256 d99b6bc977d6582ea46791bdff2460e8ec933f2ef1591b0fc8161fa1e2c129e5
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\$TEMP\sobar.exe"C:\Users\Admin\AppData\Local\Temp\$TEMP\sobar.exe"1⤵