General

  • Target

    test1.test

  • Size

    302KB

  • Sample

    210924-zd9xraaac4

  • MD5

    0a359f52ad35a8d335019332274d3c88

  • SHA1

    3a2c847631d1d3592762c5c9abd7367e4d15cd1b

  • SHA256

    de7efe687330b83242dbd1dc00b380933b238b490ba6ba2617330bdf54d1a9ea

  • SHA512

    f9502c7ef0d25357b6ed3a62f834b10b695c03c99ccabff6cf40d0fb15eeed1a696ce3025f9d2af08e85a3446562ee2c96bdacbeae4015ef0a2ed2faaf6f4d13

Malware Config

Extracted

Family

squirrelwaffle

C2

atertreat.in/5iPPVRKPPX9

incentivaconsultores.com.co/55jHpKCc9DWy

cdelean.org/0qvbbmu9g

bazy.ps/M6SjrMSYC

sukmabali.com/ZXxcLYs3rzRQ

bugwilliam.tk/cbB56YrugdbW

bestbeatsgh.com/42D7OwuPen

krumaila.com/UZ4NdDoDh4Tu

razehub.com/NN70nExbtLO

arcb.ro/aHUUNxE3Me5

cfmi.tg/m40YS6gDO0

sweetlittle.mx/ZCXP0dT2h

alkimia-prod.com/nT0imyzmo

almexperts.co.za/fEoJ3pdWZbF

Targets

    • Target

      test1.test

    • Size

      302KB

    • MD5

      0a359f52ad35a8d335019332274d3c88

    • SHA1

      3a2c847631d1d3592762c5c9abd7367e4d15cd1b

    • SHA256

      de7efe687330b83242dbd1dc00b380933b238b490ba6ba2617330bdf54d1a9ea

    • SHA512

      f9502c7ef0d25357b6ed3a62f834b10b695c03c99ccabff6cf40d0fb15eeed1a696ce3025f9d2af08e85a3446562ee2c96bdacbeae4015ef0a2ed2faaf6f4d13

    • SquirrelWaffle is a simple downloader written in C++.

      SquirrelWaffle.

    • squirrelwaffle

      Squirrelwaffle Payload

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks