Overview

overview

10

Static

static

6f20bc878b...ce.exe

windows7_x64

10

6f20bc878b...ce.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6f20bc878b65135cf35ff7461e520933368b09c27f52ed39e1d697b4e33473ce

  • Size

    1.8MB

  • Sample

    220324-3kzbdacghj

  • MD5

    814702b9eb78736121955b50480c64ff

  • SHA1

    89d81c22be84716aaad3b79642ffb4992c71d1a4

  • SHA256

    6f20bc878b65135cf35ff7461e520933368b09c27f52ed39e1d697b4e33473ce

  • SHA512

    fe141140cc11264bd374796dc3e24d28f8170eb27f2391d5ceb19d0366ade92a5eec176c1eb5e16515307917b724763a25d410c753d0ac24e2bba04851b23217

Score
10/10
sendsafeunregisteredbotnetspam

Malware Config

Extracted

Family

sendsafe

Botnet

UNREGISTERED

C2

31.44.184.32:50023

31.44.184.32:50024
Attributes
  • service_name

    Enterprise Mailing Service

Targets

    • Target

      6f20bc878b65135cf35ff7461e520933368b09c27f52ed39e1d697b4e33473ce

    • Size

      1.8MB

    • MD5

      814702b9eb78736121955b50480c64ff

    • SHA1

      89d81c22be84716aaad3b79642ffb4992c71d1a4

    • SHA256

      6f20bc878b65135cf35ff7461e520933368b09c27f52ed39e1d697b4e33473ce

    • SHA512

      fe141140cc11264bd374796dc3e24d28f8170eb27f2391d5ceb19d0366ade92a5eec176c1eb5e16515307917b724763a25d410c753d0ac24e2bba04851b23217

    Score
    10/10
    sendsafeunregisteredbotnetspam

    • SendSafe

      SendSafe is a notorious spam tool which then turned into spam botnet.

      spambotnetsendsafe

    • SendSafe Payload

      botnet
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks