Overview

overview

10

Static

static

179.exe

windows7_x64

10

179.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    179.exe

  • Size

    1.8MB

  • Sample

    211019-vs16yagca2

  • MD5

    26b3b8a5a8fb3c0acde4f567ee0685b3

  • SHA1

    ca20c59d7bfd08dc153df6449c66dbc3966aa021

  • SHA256

    41b3e54c6f6ce38b6f7d4a46d9f31cf239f8139fa1dbfd1a8099ac327c0672cb

  • SHA512

    e26c790209fc060539e527d2dc1280ab72bc1681169e7c9ffd6d7494f4bfd9869810af46ed18d4da216e710cfb52f4923e74f90256f1bfbe51b580bf8dcbc067

Score
10/10
sendsafeunregisteredbotnetspam

Malware Config

Extracted

Family

sendsafe

Botnet

UNREGISTERED

C2

31.44.184.179:50071

31.44.184.179:50072
Attributes
  • service_name

    Enterprise Mailing Service

Targets

    • Target

      179.exe

    • Size

      1.8MB

    • MD5

      26b3b8a5a8fb3c0acde4f567ee0685b3

    • SHA1

      ca20c59d7bfd08dc153df6449c66dbc3966aa021

    • SHA256

      41b3e54c6f6ce38b6f7d4a46d9f31cf239f8139fa1dbfd1a8099ac327c0672cb

    • SHA512

      e26c790209fc060539e527d2dc1280ab72bc1681169e7c9ffd6d7494f4bfd9869810af46ed18d4da216e710cfb52f4923e74f90256f1bfbe51b580bf8dcbc067

    Score
    10/10
    sendsafeunregisteredbotnetspam

    • SendSafe

      SendSafe is a notorious spam tool which then turned into spam botnet.

      spambotnetsendsafe

    • SendSafe Payload

      botnet
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks