Overview

overview

10

Static

static

test1.test.dll

windows7_x64

10

test1.test.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    test1.test

  • Size

    309KB

  • Sample

    210925-acpsraabf6

  • MD5

    3d77d7a2e2697d35b281123afe4b030c

  • SHA1

    4087259179a6761e376dcfbf2e981e1c0cacc287

  • SHA256

    07c7cb49350bf3c6de4193fb2eeb8dd92d6662d60393ebd483a54bac80fb0b44

  • SHA512

    8c1645fa7bf81be88533e9aff8a308311f637e3d0b64244a4fa1679de53f706b9222d4bc9caa82f1340dea641d33feb3dfa3b67b2cd324a65bf570b18bf3a17c

Score
10/10
squirrelwaffledownloader

Malware Config

Extracted

Family

squirrelwaffle

C2

hutraders.com/0eeUtmJf8O

goodartishard.com/0JXDM9kMwx

now.byteinsure.com/tnjUrmlhN

asceaub.com/Xl8UCLSU

colchonesmanzur.com/GjVgBnKaNIC

sistemasati.com/0SzGNkx6P

maldivehost.net/zLIisQRWZI9

lrdgon.org/l7r96tjAJ

binnawaz.com.pk/jhSZGWS76C

fhstorse.com/vJlgdjJnpIop

Targets

    • Target

      test1.test

    • Size

      309KB

    • MD5

      3d77d7a2e2697d35b281123afe4b030c

    • SHA1

      4087259179a6761e376dcfbf2e981e1c0cacc287

    • SHA256

      07c7cb49350bf3c6de4193fb2eeb8dd92d6662d60393ebd483a54bac80fb0b44

    • SHA512

      8c1645fa7bf81be88533e9aff8a308311f637e3d0b64244a4fa1679de53f706b9222d4bc9caa82f1340dea641d33feb3dfa3b67b2cd324a65bf570b18bf3a17c

    Score
    10/10
    squirrelwaffledownloader

    • SquirrelWaffle is a simple downloader written in C++.

      SquirrelWaffle.

      downloadersquirrelwaffle

    • squirrelwaffle

      Squirrelwaffle Payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks