Overview

overview

10

Static

static

119.exe

windows7_x64

10

119.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    119.exe

  • Size

    1.9MB

  • Sample

    210817-nxqlfwngna

  • MD5

    7c7fec746b2fc47f631146706e822053

  • SHA1

    a2213b498c9c939c97b69de3d121cfa48c961073

  • SHA256

    7c48dedd2bff38bb1ff62ac75267827ca6bbe92297830569ec032b50ce5a103e

  • SHA512

    de66aba4b26c067451b800af6959c7a475f70f4e65483edd58453a95b40cd7734dd66bddbf2fc33b0135b869a056e52b2f3b34c37c69313f3433b4732674ace9

Score
10/10
sendsafeunregisteredbotnetspam

Malware Config

Extracted

Family

sendsafe

Botnet

UNREGISTERED

C2

31.44.184.119:50033

31.44.184.119:50034
Attributes
  • service_name

    Enterprise Mailing Service

Targets

    • Target

      119.exe

    • Size

      1.9MB

    • MD5

      7c7fec746b2fc47f631146706e822053

    • SHA1

      a2213b498c9c939c97b69de3d121cfa48c961073

    • SHA256

      7c48dedd2bff38bb1ff62ac75267827ca6bbe92297830569ec032b50ce5a103e

    • SHA512

      de66aba4b26c067451b800af6959c7a475f70f4e65483edd58453a95b40cd7734dd66bddbf2fc33b0135b869a056e52b2f3b34c37c69313f3433b4732674ace9

    Score
    10/10
    sendsafeunregisteredbotnetspam

    • SendSafe

      SendSafe is a notorious spam tool which then turned into spam botnet.

      spambotnetsendsafe

    • sendsafe

      SendSafe Payload

      botnet
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks