Towards Black-Box Membership Inference Attack for Diffusion Models