General

  • Target

    test.test

  • Size

    262KB

  • Sample

    210923-m89t1sabe3

  • MD5

    c275b86926b06d7bf7f83a555d6ba753

  • SHA1

    b2a2e519dc1514897e179877b83dc6526f46fd71

  • SHA256

    4f56b79da4f1e69c580301c9b7ef3e27a5853005724d5a171bc198d14cc1a1ce

  • SHA512

    cc785b8bd0f1d88ba69a93080253d0505093bd2d601909d1e781ae9a44b72cbd5f0f64a6b674e2759fead6830aa9cd60acb84c8c07da8cf52e9be18a290052eb

Malware Config

Extracted

Family

squirrelwaffle

C2

deanandwilconstruction.com/UXEvfuIlhws

arimeto.lv/Nm70oAfwB

gitamschool.com/oZbs0Oqw7uv

eresourcesmoneymarket.com/JbVwdgaV6l

flyershipmanager.com/SGAsORYsywt

Attributes
  • blocklist

    94.46.179.80

    206.189.205.251

    88.242.66.45

    85.75.110.214

    87.104.3.136

    207.244.91.171

    49.230.88.160

    91.149.252.75

    91.149.252.88

    92.211.109.152

    178.0.250.168

    88.69.16.230

    95.223.77.160

    99.234.62.23

    2.206.105.223

    84.222.8.201

    89.183.239.142

    5.146.132.101

    77.7.60.154

    45.41.106.122

    45.74.72.13

    74.58.152.123

    88.87.68.197

    109.70.100.25

    185.67.82.114

    207.102.138.19

    204.101.161.14

    193.128.108.251

    111.7.100.17

    111.7.100.16

Targets

    • Target

      test.test

    • Size

      262KB

    • MD5

      c275b86926b06d7bf7f83a555d6ba753

    • SHA1

      b2a2e519dc1514897e179877b83dc6526f46fd71

    • SHA256

      4f56b79da4f1e69c580301c9b7ef3e27a5853005724d5a171bc198d14cc1a1ce

    • SHA512

      cc785b8bd0f1d88ba69a93080253d0505093bd2d601909d1e781ae9a44b72cbd5f0f64a6b674e2759fead6830aa9cd60acb84c8c07da8cf52e9be18a290052eb

    • SquirrelWaffle is a simple downloader written in C++.

      SquirrelWaffle.

    • squirrelwaffle

      Squirrelwaffle Payload

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks