e58e54ccbf6144202f3493098640f71bb1da6ca2b8748f835d35c618efcc99db | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
23/07/2024, 05:02

Sharing

Report Analysis Logs

General

Target

$TEMP/sobar.exe
Size

160KB
MD5

68bad3df9b4c2aeb37637fb743bf45cb
SHA1

648c33e40a263e77b7fcf00abc634c323a003197
SHA256

b8200cee266f62ec6e7dfa48594dffa2ce9453eaa675e167fccc5ada7ffca408
SHA512

9b3fb539e83a40893fbdf3d3eb4d3d4375b6824621fc20640fcc1fd01eb4fedc28f619c4dad1e23bd63767104ea640afbf6aca3bd783dd4e074a42ae86a7cf04
SSDEEP

3072:VMCFnqbkJwZzrp/RLQoaQr6etOlkDfk3KfoFcfyHLkJlE6:Vqn/RLQoaQOgOk0JYE6

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\$TEMP\sobar.exe
"C:\Users\Admin\AppData\Local\Temp\$TEMP\sobar.exe"
1⤵
PID:2032

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads