Analysis
-
max time kernel
93s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
03/02/2024, 05:41
General
-
Target
$TEMP/sobar.exe
-
Size
106KB
-
MD5
56e266383bd9c030726363d427006ff8
-
SHA1
f1d1beb425b1fe384dda0f544518aadc80e42a9b
-
SHA256
d0322d1efe0dde1edf8a10b44af90b6013e117e5f40638e203c6de1642914556
-
SHA512
771294c2cfb26cd7f5ec458e212c2233bfa9975ef1d3605e418421fc439aaf0b287bebbeb9d838548d0b7028ae019c81f4892371c313f993ef851b788d9de2a6
-
SSDEEP
1536:VAbk8OFzTqbkJ5qw/qzrzlXHu+TVj3Q/fClD21Qr6etqrlm7SZeDU7az7sC7k:VMCFnqbkJwZzrp/RLQoaQr6etOlkDfkx
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\$TEMP\sobar.exe"C:\Users\Admin\AppData\Local\Temp\$TEMP\sobar.exe"1⤵