Analysis

  • max time kernel
    231s
  • max time network
    234s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-12-2022 04:30

General

  • Target

    blackcat.zip

  • Size

    1.6MB

  • MD5

    f8fa36ebd1c3e16af23c1e5e5b08b81d

  • SHA1

    420febdc5f3f0cda8097ab229f137a9806d19dea

  • SHA256

    3539c61962135c39176ba278fffe871d39d7f2055000650f8b13bdcad2d0d502

  • SHA512

    9aeeaa8dc99c3d56e68f80fed3609c4fe777acf30f67b2e9d39e8f2e74be77682501c75ff17fe20ab24b2b462db103cae1b16cad5e927dc5145fcef0b7d1a7c1

  • SSDEEP

    49152:ji3xXV9n+CCQUcyqDUSuc002G3RvISSfl211I:jyxDCXcyjSuc002mg/flgI

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\blackcat.zip
    1⤵
      PID:4848
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:3956
      • C:\Users\Admin\Desktop\blackcat.exe
        "C:\Users\Admin\Desktop\blackcat.exe"
        1⤵
          PID:448
        • C:\Users\Admin\Desktop\blackcat.exe
          "C:\Users\Admin\Desktop\blackcat.exe"
          1⤵
            PID:4060

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads