Analysis
-
max time kernel
231s -
max time network
234s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
29-12-2022 04:30
Behavioral task
behavioral1
Sample
blackcat.zip
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
blackcat.zip
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
blackcat.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
blackcat.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
ĵ.doc
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
ĵ.doc
Resource
win10v2004-20221111-en
General
-
Target
blackcat.zip
-
Size
1.6MB
-
MD5
f8fa36ebd1c3e16af23c1e5e5b08b81d
-
SHA1
420febdc5f3f0cda8097ab229f137a9806d19dea
-
SHA256
3539c61962135c39176ba278fffe871d39d7f2055000650f8b13bdcad2d0d502
-
SHA512
9aeeaa8dc99c3d56e68f80fed3609c4fe777acf30f67b2e9d39e8f2e74be77682501c75ff17fe20ab24b2b462db103cae1b16cad5e927dc5145fcef0b7d1a7c1
-
SSDEEP
49152:ji3xXV9n+CCQUcyqDUSuc002G3RvISSfl211I:jyxDCXcyjSuc002mg/flgI
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\blackcat.zip1⤵PID:4848
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:3956
-
C:\Users\Admin\Desktop\blackcat.exe"C:\Users\Admin\Desktop\blackcat.exe"1⤵PID:448
-
C:\Users\Admin\Desktop\blackcat.exe"C:\Users\Admin\Desktop\blackcat.exe"1⤵PID:4060