95c1da9ad1e59d60f70c922e23c8fc86bb8b08f8401cdaa9d36260a3dea34a49 | Triage

Analysis

max time kernel
37s
max time network
44s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
05/10/2022, 09:25

Sharing

Report Analysis Logs

General

Target

Wallets/Google MetaMask/000156.ldb
Size

38KB
MD5

cbf4362921bbc2521b553b58e5864521
SHA1

93135503c5995dbbd6ebfad514744eb0cb888246
SHA256

1214867094d764adc8c723a15ad60c502cc61e96125980bb68b1abd7c99e83de
SHA512

c6c413b429db3a323beb77009bdc2231579a2db1e98bb9fe25eba4962eedce3911df895c61b87ad122b4393ce0cd4705d064c9f9cc55175c850e5301750ba063
SSDEEP

768:7v6FNJ80PAYjy+yiYlIVZuIRjpApT67jWYdAHZBXxzfchwuCWHWa7a4tty+/fgpy:7vYBy+bzVhRdA47AXwbhg4bAE

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Wallets\Google MetaMask\000156.ldb"
1⤵
PID:856

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/856-54-0x000007FEFBD11000-0x000007FEFBD13000-memory.dmp

Filesize
8KB

Download