Technical Analysis of ALPHV/BlackCat Ransomware

**BlackCat (ALPHV) ransomware analysis:** This report details the technical behavior of BlackCat— a Rust-based, command-line ransomware that requires a 32-character access token (anti-sandbox), abuses a COM-based UAC bypass (CMSTPLUA) for privilege escalation, enumerates and encrypts files using AES/ChaCha20, deletes volume shadow copies, alters the desktop/ransom note and supports double-extortion via an associated .NET stealer (ExMatter); the report includes sample SHA256 hashes and a YARA rule for detection.