blackcat | aa7afb25940a0415c7150568c5bc688727ae605bfae62d860168f8a9529ba27d | Triage

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
21-07-2023 21:02

Sharing

Report Analysis Logs

General

Target

qawer.exe
Size

7.7MB
MD5

170d732f0f640723e3778c31f8b7f08f
SHA1

38f1b8146f3d020ce4324294f8b94797e15d426d
SHA256

aa7afb25940a0415c7150568c5bc688727ae605bfae62d860168f8a9529ba27d
SHA512

7ff428ef3d50960da0171abf0e0b4b0d142217652a488d3f2ff94f6409831de698928f64248816ec18062de84617bbd0d5537d69d717b4c63c406a39a09d00f9
SSDEEP

98304:5ip7QlO2j8edzc24N9bq1/HY4tFiahETUpKNixDf+Ds:567QO2j8j24NM44tFikEopKgBi

Score

10^/10

blackcat ransomware

Malware Config

Signatures

BlackCat
A Rust-based ransomware sold as RaaS first seen in late 2021.
ransomware blackcat

C:\Users\Admin\AppData\Local\Temp\qawer.exe
"C:\Users\Admin\AppData\Local\Temp\qawer.exe"
1⤵
PID:3068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3068-54-0x0000000000A00000-0x00000000011BF000-memory.dmp

Filesize
7.7MB

Download