Analysis
-
max time kernel
93s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
14/07/2024, 17:35
General
-
Target
$TEMP/sobar.exe
-
Size
386KB
-
MD5
f2adf89b219d1efe8c8423b3c15c1d0d
-
SHA1
f2d13fb817a2889dd1c47165990a635d9c597e45
-
SHA256
68a10e13c3289e98815c490b1317a98c50703f3d59ab6b364ea89c0d89db0285
-
SHA512
3e5a448445532654de2f81b3fd3ddc4d91c60e64b786a5a962c7a238799e287882f0f3d57b1eb7f6fa83ed365bfaf7beb365bc098a02075b32180f110baaa06b
-
SSDEEP
6144:Vqn/RLQoaQOgOk0JYE9ldDbVOC8G3vfFuJAcSpXsaYI6eTb+VLyrgkXoCGdl:S6oCgAXtDbQCh3vtuuDp8SqV2O
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\$TEMP\sobar.exe"C:\Users\Admin\AppData\Local\Temp\$TEMP\sobar.exe"1⤵