SHA256									Detection name
67d1f4077e929385cfd869bf279892bf10a2c8f0af4119e4bc15a2add9461fec	Ransom.Win32.BLACKCAT.SMYXBLK
0a609fa2db910615b2c1ad235ca46562ff4034800c44802a63a28826669a7eee	Ransom.Win32.BLACKCAT.SMYXBLK
cda37b13d1fdee1b4262b5a6146a35d8fc88fa572e55437a47a950037cc65d40	Ransom.Win32.BLACKCAT.YMCAE
bacedbb23254934b736a9daf6de52620c9250a49686d519ceaf0a8d25da0a97f	Ransom.Win32.BLACKCAT.SMYXBLK

------
URL
------
_hxxp://vwuzda4x76mhtutxkjnhzquuq4wgtgwjbv6wrs2m627uhg744ieaskqd[.]onion/?access-key=g7ZyzfVklepngLBki2XeB4NTccRD1m1R2RymNI23pOXwUVctZIV7CTeiwV2S3fptQIi%2F0Yk%2BIL5LVHEU4Gkj4FVKSthcz6R8ObwbdpgIsf7BdTMQP7BgsTt6JpiHBdqv1I%2FQZEsr5dc49d8O3%2BRlTphpH%2BMFf3B5uCPkg35GwD7qEi8mGWinXixlPnaCmuq2LZpGqcZe15KVIlMK1dehL277UddgPLCUe11xIVbPOSfGTAdrRUfzeUtiJkX9lSAk5ry%2FYsqcg1IgIzjdqTByCGF%2B5BnnbUNJt0NcfGt1ldkUJfXHPrN1m73390kB%2BHkT8CGM9cFME6frN5j%2BoejVmw%3D%3D