Overview

overview

10

Static

static

119.exe

windows7_x64

10

119.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    119.exe

  • Size

    1.8MB

  • Sample

    211019-vvq4ragca4

  • MD5

    16ff015176dd5b50b6164e071656b9b6

  • SHA1

    535be662b942922abd91e356a2e4876a49327d13

  • SHA256

    ab00a9ff1acce03858355b385ce0d95504ff41e39052c504a31f88ab43a6765d

  • SHA512

    d0dc1143e05f29f3f64bda934687d4637612a715acb66694173b984f4ce4d180237fa4ea43a0347b5a8b7f3f22658e3d885cae9f2c923b1038cf6b3940872f78

Score
10/10
sendsafeunregisteredbotnetspam

Malware Config

Extracted

Family

sendsafe

Botnet

UNREGISTERED

C2

31.44.184.119:50071

31.44.184.119:50072
Attributes
  • service_name

    Enterprise Mailing Service

Targets

    • Target

      119.exe

    • Size

      1.8MB

    • MD5

      16ff015176dd5b50b6164e071656b9b6

    • SHA1

      535be662b942922abd91e356a2e4876a49327d13

    • SHA256

      ab00a9ff1acce03858355b385ce0d95504ff41e39052c504a31f88ab43a6765d

    • SHA512

      d0dc1143e05f29f3f64bda934687d4637612a715acb66694173b984f4ce4d180237fa4ea43a0347b5a8b7f3f22658e3d885cae9f2c923b1038cf6b3940872f78

    Score
    10/10
    sendsafeunregisteredbotnetspam

    • SendSafe

      SendSafe is a notorious spam tool which then turned into spam botnet.

      spambotnetsendsafe

    • SendSafe Payload

      botnet
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks