f6f26f4f3a6832f645c10551c2194155cb9d792922dc9e341dcae0030458ab28 | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
19/03/2024, 17:50

Sharing

Report Analysis Logs

General

Target

$TEMP/sobar.exe
Size

434KB
MD5

8c15acbdf77ef12218ef86558a80f649
SHA1

2754f24fdcebf1af2405058e27ee35f16a2b71fd
SHA256

5201101ce1b1c891204aab86e4bcaa8f3cdc307d7b443c490730c31913855a17
SHA512

4ebdd7643514fcfb3712da5454143e67805771e99fcf3c72701e58c9ad51e41fa519569be4d3ce62b69c09652ebb84062b4256b6726f7792efe7f642026af711
SSDEEP

6144:Vqn/RLQoaQOgOk0JYE9ldDbVOC8G3vfFuJAcSpXsaYI6eTb+VLyrgkXoCGdBW4G9:S6oCgAXtDbQCh3vtuuDp8SqV2Gjc

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\$TEMP\sobar.exe
"C:\Users\Admin\AppData\Local\Temp\$TEMP\sobar.exe"
1⤵
PID:2228

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads