sendsafe | fd4d215f764c5628e3b6cb1b2901cbcbc6dbb8a00fe346a8765a4a85771c1463 | Triage

Sharing

General

Target

fd4d215f764c5628e3b6cb1b2901cbcbc6dbb8a00fe346a8765a4a85771c1463
Size

1.8MB
Sample

220524-rsfnfsece4
MD5

2efcda19f398277b1ef13cefe46971d5
SHA1

abbadac726f6384dec2d74b929e65015192c0086
SHA256

fd4d215f764c5628e3b6cb1b2901cbcbc6dbb8a00fe346a8765a4a85771c1463
SHA512

88ee30bd73f7cef34157b6de196d837c49310e98d8ae89c38e9dd39407e8e8ddbfe19f83fbbf50a83fce07b55dfdec73780621619c352a80db231bd1e4f0ea38

Score

10^/10

sendsafe unregistered botnet spam

Malware Config

Extracted

Family

sendsafe

Botnet

UNREGISTERED

C2

31.44.184.67:50015

31.44.184.67:50016

Attributes

service_name
Enterprise Mailing Service

Targets

- Target
  
  fd4d215f764c5628e3b6cb1b2901cbcbc6dbb8a00fe346a8765a4a85771c1463
- Size
  
  1.8MB
- MD5
  
  2efcda19f398277b1ef13cefe46971d5
- SHA1
  
  abbadac726f6384dec2d74b929e65015192c0086
- SHA256
  
  fd4d215f764c5628e3b6cb1b2901cbcbc6dbb8a00fe346a8765a4a85771c1463
- SHA512
  
  88ee30bd73f7cef34157b6de196d837c49310e98d8ae89c38e9dd39407e8e8ddbfe19f83fbbf50a83fce07b55dfdec73780621619c352a80db231bd1e4f0ea38
Score

10^/10

sendsafe unregistered botnet spam
- SendSafe
  SendSafe is a notorious spam tool which then turned into spam botnet.
  spam botnet sendsafe
- SendSafe Payload
  botnet
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

sendsafeunregisteredbotnetspam