sendsafe | ff6f00ac3b14572a520cabdbe5979caf5dabb8d89fc5993d2c83dc6ea75bccd6 | Triage

Sharing

General

Target

ff6f00ac3b14572a520cabdbe5979caf5dabb8d89fc5993d2c83dc6ea75bccd6
Size

1.9MB
Sample

230129-t212vsdg93
MD5

805fa2f02b9d95734edda82bc586e2f5
SHA1

6219d9fc30797a0b456e67253819f68648ee6c6d
SHA256

ff6f00ac3b14572a520cabdbe5979caf5dabb8d89fc5993d2c83dc6ea75bccd6
SHA512

221faab7d3c885e5d655987194fbd509d91f58c19ba86f61a4c622b0f5a066ad3a0a5544d2516826a79920b56952006d7f44889554804230c76688db3402d41c
SSDEEP

49152:1oWrHHJeSUtbtMCiwwxi53lkH4R7+RiiKUE0HcL1M5:ZrHMSUECiizkYARBlE0HQu5

Score

10^/10

sendsafe unregistered botnet spam

Malware Config

Extracted

Family

sendsafe

Botnet

UNREGISTERED

C2

31.44.184.81:50035

31.44.184.81:50036

Attributes

service_name
Enterprise Mailing Service

Targets

- Target
  
  ff6f00ac3b14572a520cabdbe5979caf5dabb8d89fc5993d2c83dc6ea75bccd6
- Size
  
  1.9MB
- MD5
  
  805fa2f02b9d95734edda82bc586e2f5
- SHA1
  
  6219d9fc30797a0b456e67253819f68648ee6c6d
- SHA256
  
  ff6f00ac3b14572a520cabdbe5979caf5dabb8d89fc5993d2c83dc6ea75bccd6
- SHA512
  
  221faab7d3c885e5d655987194fbd509d91f58c19ba86f61a4c622b0f5a066ad3a0a5544d2516826a79920b56952006d7f44889554804230c76688db3402d41c
- SSDEEP
  
  49152:1oWrHHJeSUtbtMCiwwxi53lkH4R7+RiiKUE0HcL1M5:ZrHMSUECiizkYARBlE0HQu5
Score

10^/10

sendsafe unregistered botnet spam
- SendSafe
  SendSafe is a notorious spam tool which then turned into spam botnet.
  spam botnet sendsafe
- SendSafe payload
  botnet
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

sendsafeunregisteredbotnetspam

behavioral2

sendsafeunregisteredbotnetspam