General

  • Target

    747041.dll

  • Size

    119KB

  • Sample

    210922-npmqtafacm

  • MD5

    1f0f61082b16807aefb4b35f21eabaf1

  • SHA1

    15cc662de7a80b4c10968c9d9bb9c2173078416f

  • SHA256

    ab05d6335b06a0dbc41386c7c356202b4e07dcf76a4932ed4d4e7dd69b7a3101

  • SHA512

    209af96c1679766e61c3a5d31e80ed3b68d64b83ba4808e8a7253370ae33c9367f1833b1a89a37bfa2444d88be637cdc2f5ba9d9af03caf1d69981d13155f61d

Score
10/10

Malware Config

Extracted

Family

squirrelwaffle

C2

celulasmadreenmexico.com.mx/Wt793Aua

gerencial.institutoacqua.org.br/XynFkhJAxnm

dashboard.adlytic.ai/LlvLoc9O3

bussiness-z.ml/3pdEiqsni

ifiengineers.com/hGVc55g2e

bonusvulkanvegas.srdm.in/U7oOxmI1m

ebrouteindia.com/JEqGe1hNR

test.dirigu.ro/dXf4cS4GPL

cablingpoint.com/LjDG0hkp

perfectdemos.com/T6PQGYCMt

afrizam.360cyberlink.com/f36rjSN5D1

giasuphire.tddvn.com/miFO43YP9b

priyacareers.com/GiTHMPbU

assurant.360cyberlink.com/DGx4k8U9Hil

sig.institutoacqua.org.br/tM7tINg2sCU

Attributes
  • blocklist

    94.46.179.80

    206.189.205.251

    88.242.66.45

    85.75.110.214

    87.104.3.136

    207.244.91.171

    49.230.88.160

    91.149.252.75

    91.149.252.88

    92.211.109.152

    178.0.250.168

    88.69.16.230

    95.223.77.160

    99.234.62.23

    2.206.105.223

    84.222.8.201

    89.183.239.142

    5.146.132.101

    77.7.60.154

    45.41.106.122

    45.74.72.13

    74.58.152.123

    88.87.68.197

    109.70.100.25

    185.67.82.114

    207.102.138.19

    204.101.161.14

    193.128.108.251

    111.7.100.17

    111.7.100.16

Targets

    • Target

      747041.dll

    • Size

      119KB

    • MD5

      1f0f61082b16807aefb4b35f21eabaf1

    • SHA1

      15cc662de7a80b4c10968c9d9bb9c2173078416f

    • SHA256

      ab05d6335b06a0dbc41386c7c356202b4e07dcf76a4932ed4d4e7dd69b7a3101

    • SHA512

      209af96c1679766e61c3a5d31e80ed3b68d64b83ba4808e8a7253370ae33c9367f1833b1a89a37bfa2444d88be637cdc2f5ba9d9af03caf1d69981d13155f61d

    Score
    1/10

MITRE ATT&CK Matrix

Tasks