blackcat | 6253659a160638bb4622dcf28a4f0e0474129794827de68bc276bc4b29e0addf | Triage

Analysis

max time kernel
31s
max time network
34s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
06-03-2023 13:04

Sharing

Report Analysis Logs

General

Target

yyy.exe
Size

7.0MB
MD5

a7066d859ebbb72dbf7e389315af602a
SHA1

62ef117c4e6498ec4ecc5b16b8b26fb7f0856530
SHA256

6253659a160638bb4622dcf28a4f0e0474129794827de68bc276bc4b29e0addf
SHA512

14cca741e2687bdf387db3b06f50c8f3f25ca7baac2bd0cb6d7e596bdf530c5f73f6db59b400281a61f7b047192c2d5e7990c8a49e29dd725a6bde8f564a1d64
SSDEEP

98304:+49zphNptj7fjINLCVktAB6s43rUJ+BZm3a5BMsE5KJS:F9Fh7tj7fjuul943rUMBZoKB5cKJ

Score

10^/10

blackcat ransomware

Malware Config

Signatures

BlackCat
A Rust-based ransomware sold as RaaS first seen in late 2021.
ransomware blackcat

C:\Users\Admin\AppData\Local\Temp\yyy.exe
"C:\Users\Admin\AppData\Local\Temp\yyy.exe"
1⤵
PID:1260

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1260-54-0x00000000003F0000-0x0000000000AFD000-memory.dmp

Filesize
7.1MB

Download