Overview

overview

10

Static

static

a19c229258...a5.exe

windows7_x64

10

a19c229258...a5.exe

windows10-2004_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a19c22925856b0bae305967ac13e35babf31bd59c7e03662b71126f56ba041a5

  • Size

    2.1MB

  • Sample

    220525-adwmpacec7

  • MD5

    9de8c58bce50d47be7ac227d4c0b1d57

  • SHA1

    dc0aa1bf3ef425b40df474a3b7f49dbfe55950fc

  • SHA256

    a19c22925856b0bae305967ac13e35babf31bd59c7e03662b71126f56ba041a5

  • SHA512

    469655b3a0bea6d160e02a291a9aef22d137e6e68bab12c8b5a2c94e33e40c25d11bc1946dc26aeda592af525103009b868556968ca2b656ac601626dcdaee78

Score
10/10
sendsafeunregisteredbotnetspam

Malware Config

Extracted

Family

sendsafe

Botnet

UNREGISTERED

C2

91.220.131.131:50011

91.220.131.131:50012
Attributes
  • service_name

    Enterprise Mailing Service

Targets

    • Target

      a19c22925856b0bae305967ac13e35babf31bd59c7e03662b71126f56ba041a5

    • Size

      2.1MB

    • MD5

      9de8c58bce50d47be7ac227d4c0b1d57

    • SHA1

      dc0aa1bf3ef425b40df474a3b7f49dbfe55950fc

    • SHA256

      a19c22925856b0bae305967ac13e35babf31bd59c7e03662b71126f56ba041a5

    • SHA512

      469655b3a0bea6d160e02a291a9aef22d137e6e68bab12c8b5a2c94e33e40c25d11bc1946dc26aeda592af525103009b868556968ca2b656ac601626dcdaee78

    Score
    10/10
    sendsafeunregisteredbotnetspam

    • SendSafe

      SendSafe is a notorious spam tool which then turned into spam botnet.

      spambotnetsendsafe

    • SendSafe Payload

      botnet
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks