Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
92s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
01/02/2024, 11:01
General
-
Target
2024-02-01_68c04c7a7cdc70b4eebe2dc2dde04c4c_blackcat.exe
-
Size
14.4MB
-
MD5
68c04c7a7cdc70b4eebe2dc2dde04c4c
-
SHA1
42e6ad4f96b589d79db85e09341b6751f595dcbd
-
SHA256
c1ff927c596b4f8993bd90c3797b2356a14d29b187e7259f8483af57cfce1087
-
SHA512
27ac406e8f6e902465dd22c4db5e2c13cc96f5e041f746dde251afc30b3633013a1cb651a8c6eb6dd3b4738c44ab3a30c681c29f748e3dbcfe252911fb52fba8
-
SSDEEP
196608:czpRr2C41n4lhWj9hAn8Onos9P87SsdE/S7Ym1bjkCGCl2chSh:KRr2JJhEU7SFPm1bACn24S
Score
10/10
Malware Config
Signatures
-
BlackCat
A Rust-based ransomware sold as RaaS first seen in late 2021.
-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003) 1 IoCs
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-01_68c04c7a7cdc70b4eebe2dc2dde04c4c_blackcat.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-01_68c04c7a7cdc70b4eebe2dc2dde04c4c_blackcat.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
14.4MB