Overview

overview

10

Static

static

1ed750c657...c4.exe

windows7_x64

10

1ed750c657...c4.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1ed750c65754f8fa905f2e8a6f2dd864f910a2a7b68f080ca946efe22a28b0c4

  • Size

    1.9MB

  • Sample

    220516-pqjafsbeg4

  • MD5

    397149c43cba3dc36aa008e8e1e7b430

  • SHA1

    866f579d72d2e817a0e31a1837673b687f0b447b

  • SHA256

    1ed750c65754f8fa905f2e8a6f2dd864f910a2a7b68f080ca946efe22a28b0c4

  • SHA512

    0c100e7153e8b59a12ada7ae48c61cbfb06def7b5f1c0413f70f26f59b040299ce42ba31cedc18b92227346fb3c40e3ccda8b78bf2dfedb31ec7f50853a4c938

Score
10/10
sendsafeunregisteredbotnetspam

Malware Config

Extracted

Family

sendsafe

Botnet

UNREGISTERED

C2

31.44.184.106:50005

31.44.184.106:50006
Attributes
  • service_name

    Enterprise Mailing Service

Targets

    • Target

      1ed750c65754f8fa905f2e8a6f2dd864f910a2a7b68f080ca946efe22a28b0c4

    • Size

      1.9MB

    • MD5

      397149c43cba3dc36aa008e8e1e7b430

    • SHA1

      866f579d72d2e817a0e31a1837673b687f0b447b

    • SHA256

      1ed750c65754f8fa905f2e8a6f2dd864f910a2a7b68f080ca946efe22a28b0c4

    • SHA512

      0c100e7153e8b59a12ada7ae48c61cbfb06def7b5f1c0413f70f26f59b040299ce42ba31cedc18b92227346fb3c40e3ccda8b78bf2dfedb31ec7f50853a4c938

    Score
    10/10
    sendsafeunregisteredbotnetspam

    • SendSafe

      SendSafe is a notorious spam tool which then turned into spam botnet.

      spambotnetsendsafe

    • SendSafe Payload

      botnet
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks