Resubmissions

12/10/2021, 19:51

211012-yks25sdbf910

01/10/2021, 04:26

211001-e2kmjsahdl10

General

  • Target
    stage2.bin
  • Size 76KB
  • Sample211001-e2kmjsahdl
  • SHA256 d6caf64597bd5e0803f7d0034e73195e83dae370450a2e890b82f77856830167
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • squirrelwaffle

C2
  • pop.vicamtaynam.com/VtyiHAft

  • snsvidyapeeth.in/aXmo2Dr3

  • trinitytesttubebaby.com/QR2JvfE3Sv

  • iconskw.com/cqdPtAbZ

  • ebookchuyennganh.com/v9PMvQDxHK8W

  • alsader.net/BHdQaiQ9rt

  • avyanshglobal.com/6pYjPlqf

  • primahills-online.com/ypCiZn7tMx

  • antoniocastroycia.com.co/WHe08obY

  • apexbiotech.net/VQgunQ4t5Ue

  • vscm.in/V3tYKxDz

  • sinaloworx.co.za/3GilA8Eo3r

  • dancongnghe.xyz/yRByhX6J3REI

  • trajesuniformes.com.br/qQofZMaJm

  • fiorenzapaes.com.br/PGYpETW7

  • astetinternational.com/arW5e44Y7vzO

  • razisystem.ir/MqvvkX0cWvn

  • krishnaiti.org.in/rWA02HQY4

Targets

    • Target
      stage2.bin
    • Size 76KB
    • SHA256 d6caf64597bd5e0803f7d0034e73195e83dae370450a2e890b82f77856830167
    • MD5 SHA1 SHA512
    Score
    10/10
    • suricata: ET MALWARE Possible SQUIRRELWAFFLE Server Response

      suricata: ET MALWARE Possible SQUIRRELWAFFLE Server Response

    • suricata: ET MALWARE SQUIRRELWAFFLE Loader Activity (POST)

      suricata: ET MALWARE SQUIRRELWAFFLE Loader Activity (POST)

    • suricata: ET MALWARE SQUIRRELWAFFLE Server Response

      suricata: ET MALWARE SQUIRRELWAFFLE Server Response

MITRE ATT&CK Matrix

Tasks