blackcat | cc57e969376e9468c58aef17a556c2c9f77c8d7f42a8c2325b36fa715abb38ec

Analysis

max time kernel
141s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
31-05-2024 05:30

Target

cc57e969376e9468c58aef17a556c2c9f77c8d7f42a8c2325b36fa715abb38ec.exe
Size

3.1MB
MD5

d9fbc1cb2df3b4d8952e679b8f35b11c
SHA1

054d88f96a97ba510173b33dd36d916d046fa367
SHA256

cc57e969376e9468c58aef17a556c2c9f77c8d7f42a8c2325b36fa715abb38ec
SHA512

fd6d2a007d9587c0e26c27c4b9727cb11041c97a488bcdac4343f2782d7454d1b28e9a1d3f0716eb2b4f3a92c62c1d5c4ada6303b14e625dd7e09505147ab1c2
SSDEEP

98304:GUxLh8nmHbrslHyErOlv7fhng+PUoAConBhsO2:GUxLGm7YdyEylvjhgyPRgzs

Score

10^/10

BlackCat
A Rust-based ransomware sold as RaaS first seen in late 2021.
ransomware blackcat

C:\Users\Admin\AppData\Local\Temp\cc57e969376e9468c58aef17a556c2c9f77c8d7f42a8c2325b36fa715abb38ec.exe
"C:\Users\Admin\AppData\Local\Temp\cc57e969376e9468c58aef17a556c2c9f77c8d7f42a8c2325b36fa715abb38ec.exe"
1⤵
PID:3176

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3840 --field-trial-handle=3192,i,2785050981002401924,4037047756083432660,262144 --variations-seed-version /prefetch:8
1⤵
PID:4848

memory/3176-0-0x0000000000400000-0x00000000006FF000-memory.dmp

Filesize
3.0MB

Download
memory/3176-1-0x0000000002880000-0x00000000028CF000-memory.dmp

Filesize
316KB

Download
memory/3176-2-0x0000000000400000-0x00000000006FF000-memory.dmp

Filesize
3.0MB

Download
memory/3176-3-0x0000000000400000-0x00000000006FF000-memory.dmp

Filesize
3.0MB

Download
memory/3176-5-0x0000000000401000-0x00000000005F1000-memory.dmp

Filesize
1.9MB

Download
memory/3176-6-0x0000000000400000-0x00000000006FF000-memory.dmp

Filesize
3.0MB

Download
memory/3176-4-0x0000000000400000-0x00000000006FF000-memory.dmp

Filesize
3.0MB

Download
memory/3176-7-0x00000000001D0000-0x00000000001D2000-memory.dmp

Filesize
8KB

Download
memory/3176-8-0x0000000000400000-0x00000000006FF000-memory.dmp

Filesize
3.0MB

Download
memory/3176-9-0x0000000000400000-0x00000000006FF000-memory.dmp

Filesize
3.0MB

Download
memory/3176-11-0x0000000000400000-0x00000000006FF000-memory.dmp

Filesize
3.0MB

Download
memory/3176-13-0x0000000000401000-0x00000000005F1000-memory.dmp

Filesize
1.9MB

Download
memory/3176-12-0x0000000002880000-0x00000000028CF000-memory.dmp

Filesize
316KB

Download