Overview

overview

10

Static

static

3

3fa63c5fdf...18.exe

windows7-x64

10

3fa63c5fdf...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3fa63c5fdfd6185e490b22b5394b7957_JaffaCakes118

  • Size

    1.8MB

  • Sample

    240513-qg3s6sga5y

  • MD5

    3fa63c5fdfd6185e490b22b5394b7957

  • SHA1

    10077af7b9b18f6949849c886dd7485ca3afa393

  • SHA256

    17bf17a08c2fd48ba2234bc8ed1160dfadd5ed8240b73be9a3b6e4d22ff1cb12

  • SHA512

    a94c56a663b153198d82ae210680838a1bc533a9205fea61902c46db7ea0ac6dfca05289082284b52af32e20c4bf805fbb7f2ed8a911e9fdebcda20c946d41b0

  • SSDEEP

    49152:vQUKhWpFHn581WQiYJewDahxYBaSLneZbRuXBl:XKwUkwC9Z9uXL

Score
10/10
sendsafeunregisteredbotnetspam

Malware Config

Extracted

Family

sendsafe

Botnet

UNREGISTERED

C2

31.44.184.95:50007

31.44.184.95:50008
Attributes
  • service_name

    Enterprise Mailing Service

Targets

    • Target

      3fa63c5fdfd6185e490b22b5394b7957_JaffaCakes118

    • Size

      1.8MB

    • MD5

      3fa63c5fdfd6185e490b22b5394b7957

    • SHA1

      10077af7b9b18f6949849c886dd7485ca3afa393

    • SHA256

      17bf17a08c2fd48ba2234bc8ed1160dfadd5ed8240b73be9a3b6e4d22ff1cb12

    • SHA512

      a94c56a663b153198d82ae210680838a1bc533a9205fea61902c46db7ea0ac6dfca05289082284b52af32e20c4bf805fbb7f2ed8a911e9fdebcda20c946d41b0

    • SSDEEP

      49152:vQUKhWpFHn581WQiYJewDahxYBaSLneZbRuXBl:XKwUkwC9Z9uXL

    Score
    10/10
    sendsafeunregisteredbotnetspam

    • SendSafe

      SendSafe is a notorious spam tool which then turned into spam botnet.

      spambotnetsendsafe

    • SendSafe payload

      botnet
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks