sendsafe | 7fb6920c68a3c72140bdaefe3fc7ebca3693044ecbae062dd6b833b51319ce4f | Triage

Sharing

General

Target

7fb6920c68a3c72140bdaefe3fc7ebca3693044ecbae062dd6b833b51319ce4f
Size

1.9MB
Sample

230129-t2z5kadg92
MD5

f09807cb84577411bebbaed4dcdf9a25
SHA1

7e07c303bc6a7fb81baa57971189050a95967bcd
SHA256

7fb6920c68a3c72140bdaefe3fc7ebca3693044ecbae062dd6b833b51319ce4f
SHA512

2400aa9282d05bfed9b1c7f6857aca74fcda8ea76d88c8ced52efad41e71ae778cd62a9b19135b3666c1aa2cb5ab5d5fa60da4c5b4347ed9476fdc92d0cb692c
SSDEEP

49152:poWrHHJeSUtbtMCiwwxi53lkH4R7+RiiKUE0HcL1MH:drHMSUECiizkYARBlE0HQuH

Score

10^/10

sendsafe unregistered botnet spam

Malware Config

Extracted

Family

sendsafe

Botnet

UNREGISTERED

C2

31.44.184.55:50033

31.44.184.55:50034

Attributes

service_name
Enterprise Mailing Service

Targets

- Target
  
  7fb6920c68a3c72140bdaefe3fc7ebca3693044ecbae062dd6b833b51319ce4f
- Size
  
  1.9MB
- MD5
  
  f09807cb84577411bebbaed4dcdf9a25
- SHA1
  
  7e07c303bc6a7fb81baa57971189050a95967bcd
- SHA256
  
  7fb6920c68a3c72140bdaefe3fc7ebca3693044ecbae062dd6b833b51319ce4f
- SHA512
  
  2400aa9282d05bfed9b1c7f6857aca74fcda8ea76d88c8ced52efad41e71ae778cd62a9b19135b3666c1aa2cb5ab5d5fa60da4c5b4347ed9476fdc92d0cb692c
- SSDEEP
  
  49152:poWrHHJeSUtbtMCiwwxi53lkH4R7+RiiKUE0HcL1MH:drHMSUECiizkYARBlE0HQuH
Score

10^/10

sendsafe unregistered botnet spam
- SendSafe
  SendSafe is a notorious spam tool which then turned into spam botnet.
  spam botnet sendsafe
- SendSafe payload
  botnet
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

sendsafeunregisteredbotnetspam

behavioral2

sendsafeunregisteredbotnetspam