Overview

overview

10

Static

static

79.exe

windows7_x64

10

79.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    79.exe

  • Size

    1.9MB

  • Sample

    210929-rl3jmsfbb3

  • MD5

    5750a2f99d01b109567946629a2a0c6f

  • SHA1

    37a34e3d50dca788fba8920f89cfe646bfad58cc

  • SHA256

    7ff200e60567310e60ee9e6e94cfea71058a648b81c757f2841b243fd4102279

  • SHA512

    f903c25a6e4f855177e730500537c48d4c094d6ef2023854512a79db64a2a297eeba15fed01e296de69e5bdd6959718f53d07fcabe643f6f6b6e0526bdfeb469

Score
10/10
sendsafeunregisteredbotnetspam

Malware Config

Extracted

Family

sendsafe

Botnet

UNREGISTERED

C2

31.44.184.79:50063

31.44.184.79:50064
Attributes
  • service_name

    Enterprise Mailing Service

Targets

    • Target

      79.exe

    • Size

      1.9MB

    • MD5

      5750a2f99d01b109567946629a2a0c6f

    • SHA1

      37a34e3d50dca788fba8920f89cfe646bfad58cc

    • SHA256

      7ff200e60567310e60ee9e6e94cfea71058a648b81c757f2841b243fd4102279

    • SHA512

      f903c25a6e4f855177e730500537c48d4c094d6ef2023854512a79db64a2a297eeba15fed01e296de69e5bdd6959718f53d07fcabe643f6f6b6e0526bdfeb469

    Score
    10/10
    sendsafeunregisteredbotnetspam

    • SendSafe

      SendSafe is a notorious spam tool which then turned into spam botnet.

      spambotnetsendsafe

    • sendsafe

      SendSafe Payload

      botnet
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks