ee7ad0df04b6dc1dd2a6d6720f7be1dfc97f53511373da67f7b049bdf953c4f4 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
15/07/2024, 19:39

Sharing

Report Analysis Logs

General

Target

$TEMP/sobar.exe
Size

260KB
MD5

5c9e3e7d452576d9d8f310685abd7712
SHA1

6694628f3c8f62cc3865763a83350253f3c9df92
SHA256

aca8e7ac091a17e07f2e81aa422b89c0a60d0d02e8296c041b04d175cfba53a2
SHA512

8b3d815498bb67f854e85a5d393b2b5793db676f5228f1005e647da30c8057a4b1e721ebad877d4fa6347bfa62ccc4b23d0733884150cb7d25879f4ea6398fe7
SSDEEP

6144:Vqn/RLQoaQOgOk0JYE9ldDbVOC8G3vfFuJAcSa:S6oCgAXtDbQCh3vtuuDa

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\$TEMP\sobar.exe
"C:\Users\Admin\AppData\Local\Temp\$TEMP\sobar.exe"
1⤵
PID:2112

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads