General
- Target stage2.bin
- Size 76KB
- Sample211001-e2kmjsahdl
- SHA256 d6caf64597bd5e0803f7d0034e73195e83dae370450a2e890b82f77856830167
- MD5 e8ae3940c30296d494e534e0379f15d6
- SHA1 3bcb5e7bc9c317c3c067f36d7684a419da79506c
- SHA512 d07b8e684fc1c7a103b64b46d777091bb79103448e91f862c12f0080435feff1c9e907472b7fd4e236ff0b0a8e90dbbaaac202e2238f95578fed1ff6f5247386
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
stage2.bin.dll
Resource
win7-en-20210920
Behavioral task
behavioral2
Sample
stage2.bin.dll
Resource
win10-en-20210920
Malware Config
Extracted
-
squirrelwaffle
-
pop.vicamtaynam.com/VtyiHAft
-
snsvidyapeeth.in/aXmo2Dr3
-
trinitytesttubebaby.com/QR2JvfE3Sv
-
iconskw.com/cqdPtAbZ
-
ebookchuyennganh.com/v9PMvQDxHK8W
-
alsader.net/BHdQaiQ9rt
-
avyanshglobal.com/6pYjPlqf
-
primahills-online.com/ypCiZn7tMx
-
antoniocastroycia.com.co/WHe08obY
-
apexbiotech.net/VQgunQ4t5Ue
-
vscm.in/V3tYKxDz
-
sinaloworx.co.za/3GilA8Eo3r
-
dancongnghe.xyz/yRByhX6J3REI
-
trajesuniformes.com.br/qQofZMaJm
-
fiorenzapaes.com.br/PGYpETW7
-
astetinternational.com/arW5e44Y7vzO
-
razisystem.ir/MqvvkX0cWvn
-
krishnaiti.org.in/rWA02HQY4
Targets
-
- Target stage2.bin
- Size 76KB
- SHA256 d6caf64597bd5e0803f7d0034e73195e83dae370450a2e890b82f77856830167
- MD5 e8ae3940c30296d494e534e0379f15d6
- SHA1 3bcb5e7bc9c317c3c067f36d7684a419da79506c
- SHA512 d07b8e684fc1c7a103b64b46d777091bb79103448e91f862c12f0080435feff1c9e907472b7fd4e236ff0b0a8e90dbbaaac202e2238f95578fed1ff6f5247386
- MD5 SHA1 SHA512
Score10/10-
suricata: ET MALWARE Possible SQUIRRELWAFFLE Server Response
suricata: ET MALWARE Possible SQUIRRELWAFFLE Server Response
-
suricata: ET MALWARE SQUIRRELWAFFLE Loader Activity (POST)
suricata: ET MALWARE SQUIRRELWAFFLE Loader Activity (POST)
-
suricata: ET MALWARE SQUIRRELWAFFLE Server Response
suricata: ET MALWARE SQUIRRELWAFFLE Server Response