Overview

overview

10

Static

static

2ac030d5ba...8d.exe

windows7_x64

10

2ac030d5ba...8d.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2ac030d5ba191629089d26f34df4b71bff40761345ce78bd4d76390e4699778d

  • Size

    1.8MB

  • Sample

    220319-2thvbabden

  • MD5

    b9951a623114f4235e376495f10f3048

  • SHA1

    764149b2ea3ece78c15e26351cbc3682b2e9ea21

  • SHA256

    2ac030d5ba191629089d26f34df4b71bff40761345ce78bd4d76390e4699778d

  • SHA512

    118d079aa3dd313feef57237c0c05e11f513062139ecfc8a0306f5f37d6a11f19c224374733358f0e1e5c2692415585b7d46d162ecea250d4d44426a41cd352f

Score
10/10
sendsafeunregisteredbotnetspam

Malware Config

Extracted

Family

sendsafe

Botnet

UNREGISTERED

C2

31.44.184.32:50029

31.44.184.32:50030
Attributes
  • service_name

    Enterprise Mailing Service

Targets

    • Target

      2ac030d5ba191629089d26f34df4b71bff40761345ce78bd4d76390e4699778d

    • Size

      1.8MB

    • MD5

      b9951a623114f4235e376495f10f3048

    • SHA1

      764149b2ea3ece78c15e26351cbc3682b2e9ea21

    • SHA256

      2ac030d5ba191629089d26f34df4b71bff40761345ce78bd4d76390e4699778d

    • SHA512

      118d079aa3dd313feef57237c0c05e11f513062139ecfc8a0306f5f37d6a11f19c224374733358f0e1e5c2692415585b7d46d162ecea250d4d44426a41cd352f

    Score
    10/10
    sendsafeunregisteredbotnetspam

    • SendSafe

      SendSafe is a notorious spam tool which then turned into spam botnet.

      spambotnetsendsafe

    • SendSafe Payload

      botnet
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks