Analysis
-
max time kernel
143s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
19-07-2024 04:18
General
-
Target
$TEMP/sobar.exe
-
Size
508KB
-
MD5
35cbcab16f3e3833f6579e49db302b5c
-
SHA1
63c123503c583b741607eb7a6d8dd2a7244c6fa4
-
SHA256
e51ae0e66644fcf814a818b656d8da099274fb32e7e7bf734232782ecadf4c04
-
SHA512
714c8abe739c58dbe7fad652ef5acd18b25d192f7100ae9aa612e69f5b4f74d5baca940a58ac63de8440b68564a4589ef52fff6e61a2034b48f82914d60190a5
-
SSDEEP
12288:S6oCgAXtDbQCh3vtuuDp8SqV2GjMTtzdkw:S/cXtD8Ch3vtu0qQGARp
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\$TEMP\sobar.exe"C:\Users\Admin\AppData\Local\Temp\$TEMP\sobar.exe"1⤵