9f2bf14e31ec6527bf34cd2a14a107dcc70ec333301c5202cc3d11696b39f0ba | Triage™

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
19/07/2024, 04:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
$TEMP/sobar.exe
Size 508KB
Sample240719-exbh3ssdlr
SHA256 e51ae0e66644fcf814a818b656d8da099274fb32e7e7bf734232782ecadf4c04
MD5 35cbcab16f3e3833f6579e49db302b5c
SHA1 63c123503c583b741607eb7a6d8dd2a7244c6fa4
SHA512 714c8abe739c58dbe7fad652ef5acd18b25d192f7100ae9aa612e69f5b4f74d5baca940a58ac63de8440b68564a4589ef52fff6e61a2034b48f82914d60190a5
SSDEEP 12288:S6oCgAXtDbQCh3vtuuDp8SqV2GjMTtzdkw:S/cXtD8Ch3vtu0qQGARp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\$TEMP\sobar.exe
"C:\Users\Admin\AppData\Local\Temp\$TEMP\sobar.exe"
1⤵
PID:2812

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads