Overview

overview

10

Static

static

91.exe

windows7_x64

10

91.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    91.exe

  • Size

    1.9MB

  • Sample

    211005-v6k2waabf2

  • MD5

    9dad67fe028767f4e59655475f4bda64

  • SHA1

    5dcd989ecb1575b825aa69087263ff596302e9f0

  • SHA256

    bfd33470ec8e9d4776742edd651fab67d230c5d13e3ba72beb14b5a89f151892

  • SHA512

    bed935f5216edf747a8d06b424ff0920ba6402ea3bd4f23e9adf874c067fd5e00d4f35b55750b4f57b8678a36e7c685ec475572cbe00289c10856618886b78c1

Score
10/10
sendsafeunregisteredbotnetspam

Malware Config

Extracted

Family

sendsafe

Botnet

UNREGISTERED

C2

31.44.184.91:50065

31.44.184.91:50066
Attributes
  • service_name

    Enterprise Mailing Service

Targets

    • Target

      91.exe

    • Size

      1.9MB

    • MD5

      9dad67fe028767f4e59655475f4bda64

    • SHA1

      5dcd989ecb1575b825aa69087263ff596302e9f0

    • SHA256

      bfd33470ec8e9d4776742edd651fab67d230c5d13e3ba72beb14b5a89f151892

    • SHA512

      bed935f5216edf747a8d06b424ff0920ba6402ea3bd4f23e9adf874c067fd5e00d4f35b55750b4f57b8678a36e7c685ec475572cbe00289c10856618886b78c1

    Score
    10/10
    sendsafeunregisteredbotnetspam

    • SendSafe

      SendSafe is a notorious spam tool which then turned into spam botnet.

      spambotnetsendsafe

    • SendSafe Payload

      botnet
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks