Overview

overview

10

Static

static

c6bd0d90ba...fb.exe

windows7-x64

10

c6bd0d90ba...fb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c6bd0d90ba534afe556afe109469c23d73d31ad563fe1629a6c0df2909ee97fb

  • Size

    1.8MB

  • Sample

    220725-dvstxaceg5

  • MD5

    1801b59e8a960de092a3b8a875940a96

  • SHA1

    59e7d03ba78a13c64eb482dbc347aa12184642e5

  • SHA256

    c6bd0d90ba534afe556afe109469c23d73d31ad563fe1629a6c0df2909ee97fb

  • SHA512

    4bf44d36251f6774cf71f8791b00cf60329cc32ff58fdcba78641605283d1b3831a264751d0742e28b2045c366778f0e9b27fafaa630d346574850e3a7f8b979

Score
10/10
sendsafeunregisteredbotnetspam

Malware Config

Extracted

Family

sendsafe

Botnet

UNREGISTERED

C2

31.44.184.117:50017

31.44.184.117:50018
Attributes
  • service_name

    Enterprise Mailing Service

Targets

    • Target

      c6bd0d90ba534afe556afe109469c23d73d31ad563fe1629a6c0df2909ee97fb

    • Size

      1.8MB

    • MD5

      1801b59e8a960de092a3b8a875940a96

    • SHA1

      59e7d03ba78a13c64eb482dbc347aa12184642e5

    • SHA256

      c6bd0d90ba534afe556afe109469c23d73d31ad563fe1629a6c0df2909ee97fb

    • SHA512

      4bf44d36251f6774cf71f8791b00cf60329cc32ff58fdcba78641605283d1b3831a264751d0742e28b2045c366778f0e9b27fafaa630d346574850e3a7f8b979

    Score
    10/10
    sendsafeunregisteredbotnetspam

    • SendSafe

      SendSafe is a notorious spam tool which then turned into spam botnet.

      spambotnetsendsafe

    • SendSafe payload

      botnet
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks