Resubmissions

29/09/2021, 16:05

210929-tjnc2sfcd810

21/09/2021, 11:19

210921-net25shcf93

General

  • Target
    test.test
  • Size 439KB
  • Sample210929-tjnc2sfcd8
  • SHA256 64c044cb3ec26babdd17107b2aa6ded60b22473c4e2943e1fcc03df8bc2e0edb
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • squirrelwaffle

C2
  • deanandwilconstruction.com/UXEvfuIlhws

  • arimeto.lv/Nm70oAfwB

  • gitamschool.com/oZbs0Oqw7uv

  • eresourcesmoneymarket.com/JbVwdgaV6l

  • flyershipmanager.com/SGAsORYsywt

Attributes
  • blocklist

    94.46.179.80

    206.189.205.251

    88.242.66.45

    85.75.110.214

    87.104.3.136

    207.244.91.171

    49.230.88.160

    91.149.252.75

    91.149.252.88

    92.211.109.152

    178.0.250.168

    88.69.16.230

    95.223.77.160

    99.234.62.23

    2.206.105.223

    84.222.8.201

    89.183.239.142

    5.146.132.101

    77.7.60.154

    45.41.106.122

    45.74.72.13

    74.58.152.123

    88.87.68.197

    109.70.100.25

    185.67.82.114

    207.102.138.19

    204.101.161.14

    193.128.108.251

    111.7.100.17

    111.7.100.16

Targets

    • Target
      test.test
    • Size 439KB
    • SHA256 64c044cb3ec26babdd17107b2aa6ded60b22473c4e2943e1fcc03df8bc2e0edb
    • MD5 SHA1 SHA512
    • SquirrelWaffle is a simple downloader written in C++.

      SquirrelWaffle.

    • squirrelwaffle

      Squirrelwaffle Payload

MITRE ATT&CK Matrix

Tasks