Overview

overview

10

Static

static

91.exe

windows7_x64

10

91.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    91.exe

  • Size

    1.8MB

  • Sample

    211019-vvze5agca5

  • MD5

    431d21b70101f50f97cf368de0515e5a

  • SHA1

    9b42fb5d99f4e664c3b1f01aeafcf56a95335087

  • SHA256

    4713f44be69c20e99e3f46072637e786c6ab8abe9c5b03faaace88b4c7586d8d

  • SHA512

    6cf17ef4073b29fddff329835e9e3d872c09db2dcba4f0ec26ef8e03fd65b1c30471c8abcfddd7e8bd17ecbfb1b01d38ba4c0ae2addf0944fbe1c27e60e8d46f

Score
10/10
sendsafeunregisteredbotnetspam

Malware Config

Extracted

Family

sendsafe

Botnet

UNREGISTERED

C2

31.44.184.91:50071

31.44.184.91:50072
Attributes
  • service_name

    Enterprise Mailing Service

Targets

    • Target

      91.exe

    • Size

      1.8MB

    • MD5

      431d21b70101f50f97cf368de0515e5a

    • SHA1

      9b42fb5d99f4e664c3b1f01aeafcf56a95335087

    • SHA256

      4713f44be69c20e99e3f46072637e786c6ab8abe9c5b03faaace88b4c7586d8d

    • SHA512

      6cf17ef4073b29fddff329835e9e3d872c09db2dcba4f0ec26ef8e03fd65b1c30471c8abcfddd7e8bd17ecbfb1b01d38ba4c0ae2addf0944fbe1c27e60e8d46f

    Score
    10/10
    sendsafeunregisteredbotnetspam

    • SendSafe

      SendSafe is a notorious spam tool which then turned into spam botnet.

      spambotnetsendsafe

    • SendSafe Payload

      botnet
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks