Overview

overview

10

Static

static

cecbb3cbe0...0c.exe

windows7_x64

10

cecbb3cbe0...0c.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cecbb3cbe018dc3419300d5b350cdfbbb78adc3fb4d97e6738273c45c36bbf0c

  • Size

    1.8MB

  • Sample

    211029-a5gb3shbcp

  • MD5

    6ce7ffaf76ea85421e115392ad7c7ba9

  • SHA1

    23c4bf77d07bea66a11e0d2cdf1b19034f718fd4

  • SHA256

    cecbb3cbe018dc3419300d5b350cdfbbb78adc3fb4d97e6738273c45c36bbf0c

  • SHA512

    039c75fd6cda94a5f467be95a7ef093197b3f56eff53590a0edee6d08a008f892132f49746f4623554bdbe85390a47f445eff822e9cd5e90b29753b1e22fe5b4

Score
10/10
sendsafeunregisteredbotnetspam

Malware Config

Extracted

Family

sendsafe

Botnet

UNREGISTERED

C2

31.44.184.119:50073

31.44.184.119:50074
Attributes
  • service_name

    Enterprise Mailing Service

Targets

    • Target

      cecbb3cbe018dc3419300d5b350cdfbbb78adc3fb4d97e6738273c45c36bbf0c

    • Size

      1.8MB

    • MD5

      6ce7ffaf76ea85421e115392ad7c7ba9

    • SHA1

      23c4bf77d07bea66a11e0d2cdf1b19034f718fd4

    • SHA256

      cecbb3cbe018dc3419300d5b350cdfbbb78adc3fb4d97e6738273c45c36bbf0c

    • SHA512

      039c75fd6cda94a5f467be95a7ef093197b3f56eff53590a0edee6d08a008f892132f49746f4623554bdbe85390a47f445eff822e9cd5e90b29753b1e22fe5b4

    Score
    10/10
    sendsafeunregisteredbotnetspam

    • SendSafe

      SendSafe is a notorious spam tool which then turned into spam botnet.

      spambotnetsendsafe

    • SendSafe Payload

      botnet
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks