Analysis
-
max time kernel
186s -
max time network
215s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
12-07-2022 09:12
General
-
Target
4ba9c14e8123fd90208e8d4abfba407aa1832055acc64451c120d17d179b6af3.exe
-
Size
2.6MB
-
MD5
88aaabfa7462cf22c521309a75c8b077
-
SHA1
983a0b0f77c80f0deb3771377041d9f070fa66c1
-
SHA256
4ba9c14e8123fd90208e8d4abfba407aa1832055acc64451c120d17d179b6af3
-
SHA512
de7017ef3c09c2b08d7e1752d5aeb68c3fc6bf3e9bd839998ec82e9e0c6bf99665902a5fb19960fb1ef3098229214b2310d2ea0dfd3e1d4f6904d6fc6d2b17fc
Score
10/10
Malware Config
Extracted
Family
sendsafe
Botnet
UNREGISTERED
C2
91.220.131.68:50005
91.220.131.68:50006
Attributes
-
service_name
Enterprise Mailing Service
Signatures
-
SendSafe
SendSafe is a notorious spam tool which then turned into spam botnet.
-
SendSafe payload 5 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4ba9c14e8123fd90208e8d4abfba407aa1832055acc64451c120d17d179b6af3.exe"C:\Users\Admin\AppData\Local\Temp\4ba9c14e8123fd90208e8d4abfba407aa1832055acc64451c120d17d179b6af3.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
1.7MB
-
Filesize
2.6MB