Malware Analysis Report

2024-10-19 08:17

Sample ID 220927-zv6xesffhr
Target 45b8678f74d29c87e2d06410245ab6c2762b76190594cafc9543fb9db90f3d4f.zip
SHA256 a3b0bedc9c64ffbc06132b0681ee60c973b84efd31fff3b9c779f49116ab4819
Tags
blackcat
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

a3b0bedc9c64ffbc06132b0681ee60c973b84efd31fff3b9c779f49116ab4819

Threat Level: Known bad

The file 45b8678f74d29c87e2d06410245ab6c2762b76190594cafc9543fb9db90f3d4f.zip was found to be: Known bad.

Malicious Activity Summary

blackcat

Blackcat family

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2022-09-27 21:03

Signatures

Blackcat family

blackcat

Analysis: behavioral1

Detonation Overview

Submitted

2022-09-27 21:03

Reported

2022-09-27 21:21

Platform

win7-20220812-en

Max time kernel

44s

Max time network

47s

Command Line

C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\45b8678f74d29c87e2d06410245ab6c2762b76190594cafc9543fb9db90f3d4f.zip

Signatures

N/A

Processes

C:\Windows\Explorer.exe

C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\45b8678f74d29c87e2d06410245ab6c2762b76190594cafc9543fb9db90f3d4f.zip

Network

N/A

Files

N/A

Analysis: behavioral2

Detonation Overview

Submitted

2022-09-27 21:03

Reported

2022-09-27 21:21

Platform

win10v2004-20220901-en

Max time kernel

90s

Max time network

123s

Command Line

C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\45b8678f74d29c87e2d06410245ab6c2762b76190594cafc9543fb9db90f3d4f.zip

Signatures

N/A

Processes

C:\Windows\Explorer.exe

C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\45b8678f74d29c87e2d06410245ab6c2762b76190594cafc9543fb9db90f3d4f.zip

Network

Country Destination Domain Proto
US 93.184.220.29:80 tcp
US 20.189.173.15:443 tcp
FR 2.18.109.224:443 tcp

Files

N/A