95c1da9ad1e59d60f70c922e23c8fc86bb8b08f8401cdaa9d36260a3dea34a49 | Triage

Analysis

max time kernel
9s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
05/10/2022, 09:25

Sharing

Report Analysis Logs

General

Target

Wallets/Google MetaMask/000159.ldb
Size

1.6MB
MD5

81be0af8f54c215ce39d66337fcce7c2
SHA1

0975695b12dceaa03431e4614249194200fb1d83
SHA256

abfead83b4ea5ded6ed3e3de2d49705f0ac7a82c0938c9b45a83409eb6b98c82
SHA512

a1ae9fdbb9659486e644de804fc399184c4f3fd21adfdb716f97e6ef31bc13b146e069826264cf9a5f2b030390fd350582664fd584d0b96293a194a8d534b1bb
SSDEEP

49152:iLyim0GqVA4XKZuAmZoARtLnQvqIdAKEMW7NSl2bWDx:iLyim0GqVA4XKZuDZoARtLnQvqIdAKEE

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Wallets\Google MetaMask\000159.ldb"
1⤵
PID:684

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/684-54-0x000007FEFB821000-0x000007FEFB823000-memory.dmp

Filesize
8KB

Download