Overview

overview

10

Static

static

54f0076275...7e.exe

windows7-x64

10

54f0076275...7e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    54f00762755f80dae7b5f20736629f1921d0b13c17381eda53516aad55ea997e

  • Size

    2.1MB

  • Sample

    220725-v4tk8sgdd2

  • MD5

    1fc6b77668c03b3bfaa49b78a2570fbd

  • SHA1

    9ce75b025047027fe608abde93cbb6141d0a373c

  • SHA256

    54f00762755f80dae7b5f20736629f1921d0b13c17381eda53516aad55ea997e

  • SHA512

    5c4ab3f0880c345ff8d76c3976666994c6ef6c6f02f9e4f9e8f6675acf793a8f73041babbd88273e3ecdfbcfb9fa6f6a24fabd5473af8edbc35484bd6bf23a21

Score
10/10
sendsafeunregisteredbotnetspam

Malware Config

Extracted

Family

sendsafe

Botnet

UNREGISTERED

C2

91.220.131.75:50005

91.220.131.75:50006
Attributes
  • service_name

    Enterprise Mailing Service

Targets

    • Target

      54f00762755f80dae7b5f20736629f1921d0b13c17381eda53516aad55ea997e

    • Size

      2.1MB

    • MD5

      1fc6b77668c03b3bfaa49b78a2570fbd

    • SHA1

      9ce75b025047027fe608abde93cbb6141d0a373c

    • SHA256

      54f00762755f80dae7b5f20736629f1921d0b13c17381eda53516aad55ea997e

    • SHA512

      5c4ab3f0880c345ff8d76c3976666994c6ef6c6f02f9e4f9e8f6675acf793a8f73041babbd88273e3ecdfbcfb9fa6f6a24fabd5473af8edbc35484bd6bf23a21

    Score
    10/10
    sendsafeunregisteredbotnetspam

    • SendSafe

      SendSafe is a notorious spam tool which then turned into spam botnet.

      spambotnetsendsafe

    • SendSafe payload

      botnet
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks