Overview

overview

10

Static

static

fd1bb76f68...e3.exe

windows7_x64

10

fd1bb76f68...e3.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd1bb76f68b7b1d8e66bda211285afc41b41b5e97bdf015f761c74101055b6e3

  • Size

    1.8MB

  • Sample

    220515-z5vxxaaafl

  • MD5

    57fd66671e3f9c3ed96e268bba6524be

  • SHA1

    85b0e5e80b4c3f3662d170fdc850b06c5273c5a7

  • SHA256

    fd1bb76f68b7b1d8e66bda211285afc41b41b5e97bdf015f761c74101055b6e3

  • SHA512

    7fec95775b3d0acb1fb20d86bbd94522a2320c39082278f758ea999cc36d02673657bcdb0f2108a04245322739c9776b458b707bf08d03a4ea10dc7a82dd554e

Score
10/10
sendsafeunregisteredbotnetspam

Malware Config

Extracted

Family

sendsafe

Botnet

UNREGISTERED

C2

31.44.184.95:50003

31.44.184.95:50004
Attributes
  • service_name

    Enterprise Mailing Service

Targets

    • Target

      fd1bb76f68b7b1d8e66bda211285afc41b41b5e97bdf015f761c74101055b6e3

    • Size

      1.8MB

    • MD5

      57fd66671e3f9c3ed96e268bba6524be

    • SHA1

      85b0e5e80b4c3f3662d170fdc850b06c5273c5a7

    • SHA256

      fd1bb76f68b7b1d8e66bda211285afc41b41b5e97bdf015f761c74101055b6e3

    • SHA512

      7fec95775b3d0acb1fb20d86bbd94522a2320c39082278f758ea999cc36d02673657bcdb0f2108a04245322739c9776b458b707bf08d03a4ea10dc7a82dd554e

    Score
    10/10
    sendsafeunregisteredbotnetspam

    • SendSafe

      SendSafe is a notorious spam tool which then turned into spam botnet.

      spambotnetsendsafe

    • SendSafe Payload

      botnet
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks