Resubmissions

24-09-2021 20:14

210924-yz1ershhg5 10

24-09-2021 19:48

210924-yjkdlshha8 10

General

  • Target

    test1.test

  • Size

    211KB

  • Sample

    210924-yz1ershhg5

  • MD5

    78e20bf482434bc2f64245ab86c0856f

  • SHA1

    cf79862d895d744741a261432d6f7a087818d66d

  • SHA256

    85569f094eae1b6e66e0ab9d3dc0f653e3a411ef01b4fbed5ef6e462d3afeb77

  • SHA512

    1f20e16050bd76e330ad9b51dd5e942e1a6e1c97aa5508b367ae47acc900f9c5fa5f3fafc76aad1a0502add53dec5642321eeb098cc8b81d159568877fba15a2

Malware Config

Extracted

Family

squirrelwaffle

C2

pop.vicamtaynam.com/VtyiHAft

snsvidyapeeth.in/aXmo2Dr3

trinitytesttubebaby.com/QR2JvfE3Sv

iconskw.com/cqdPtAbZ

ebookchuyennganh.com/v9PMvQDxHK8W

alsader.net/BHdQaiQ9rt

avyanshglobal.com/6pYjPlqf

primahills-online.com/ypCiZn7tMx

antoniocastroycia.com.co/WHe08obY

apexbiotech.net/VQgunQ4t5Ue

vscm.in/V3tYKxDz

sinaloworx.co.za/3GilA8Eo3r

dancongnghe.xyz/yRByhX6J3REI

trajesuniformes.com.br/qQofZMaJm

fiorenzapaes.com.br/PGYpETW7

astetinternational.com/arW5e44Y7vzO

razisystem.ir/MqvvkX0cWvn

krishnaiti.org.in/rWA02HQY4

Targets

    • Target

      test1.test

    • Size

      211KB

    • MD5

      78e20bf482434bc2f64245ab86c0856f

    • SHA1

      cf79862d895d744741a261432d6f7a087818d66d

    • SHA256

      85569f094eae1b6e66e0ab9d3dc0f653e3a411ef01b4fbed5ef6e462d3afeb77

    • SHA512

      1f20e16050bd76e330ad9b51dd5e942e1a6e1c97aa5508b367ae47acc900f9c5fa5f3fafc76aad1a0502add53dec5642321eeb098cc8b81d159568877fba15a2

    • SquirrelWaffle is a simple downloader written in C++.

      SquirrelWaffle.

    • squirrelwaffle

      Squirrelwaffle Payload

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks