General

  • Target

    2025-04-06_3ded2b22f85e0720a350969315ce9575_black-basta_cobalt-strike_ryuk_satacom

  • Size

    1.0MB

  • Sample

    250406-ra63pazwa1

  • MD5

    3ded2b22f85e0720a350969315ce9575

  • SHA1

    7177823472026652dd739aae3c73aec6e2f0b220

  • SHA256

    0e9ebbf4391a1ce11ceecab0c0699a229a7f2a20b9909600310db15b1b3cf772

  • SHA512

    1c5e21ff06477efc90fb7a78d0300faad58677b836fc4838486faaa8780a99f38eaa445d521c20980935094cbedceedb4c89454badb88bbcdaed13f427bc5ff3

  • SSDEEP

    24576:Fem/E/ob86A6X5EdNWbHh3v2V6X5EdNWbHh3v2st:MmsgIn+5ETwJ++5ETwJ/

Malware Config

Extracted

Family

redline

Botnet

zoom

C2

us02web-zoom.icu:1912

Targets

    • Target

      2025-04-06_3ded2b22f85e0720a350969315ce9575_black-basta_cobalt-strike_ryuk_satacom

    • Size

      1.0MB

    • MD5

      3ded2b22f85e0720a350969315ce9575

    • SHA1

      7177823472026652dd739aae3c73aec6e2f0b220

    • SHA256

      0e9ebbf4391a1ce11ceecab0c0699a229a7f2a20b9909600310db15b1b3cf772

    • SHA512

      1c5e21ff06477efc90fb7a78d0300faad58677b836fc4838486faaa8780a99f38eaa445d521c20980935094cbedceedb4c89454badb88bbcdaed13f427bc5ff3

    • SSDEEP

      24576:Fem/E/ob86A6X5EdNWbHh3v2V6X5EdNWbHh3v2st:MmsgIn+5ETwJ++5ETwJ/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks