Overview

overview

10

Static

static

10

stage2.bin.dll

windows7_x64

1

stage2.bin.dll

windows10_x64

10

Resubmissions

12/10/2021, 19:51

211012-yks25sdbf910

01/10/2021, 04:26

211001-e2kmjsahdl10

Sharing

Copy URL Twitter E-mail

General

  • Target
    stage2.bin
  • Size 76KB
  • Sample211001-e2kmjsahdl
  • SHA256 d6caf64597bd5e0803f7d0034e73195e83dae370450a2e890b82f77856830167
  • MD5 SHA1 SHA512
Score
10/10
squirrelwaffle

Malware Config

Extracted

Family

  • squirrelwaffle

C2

  • pop.vicamtaynam.com/VtyiHAft

  • snsvidyapeeth.in/aXmo2Dr3

  • trinitytesttubebaby.com/QR2JvfE3Sv

  • iconskw.com/cqdPtAbZ

  • ebookchuyennganh.com/v9PMvQDxHK8W

  • alsader.net/BHdQaiQ9rt

  • avyanshglobal.com/6pYjPlqf

  • primahills-online.com/ypCiZn7tMx

  • antoniocastroycia.com.co/WHe08obY

  • apexbiotech.net/VQgunQ4t5Ue

  • vscm.in/V3tYKxDz

  • sinaloworx.co.za/3GilA8Eo3r

  • dancongnghe.xyz/yRByhX6J3REI

  • trajesuniformes.com.br/qQofZMaJm

  • fiorenzapaes.com.br/PGYpETW7

  • astetinternational.com/arW5e44Y7vzO

  • razisystem.ir/MqvvkX0cWvn

  • krishnaiti.org.in/rWA02HQY4

Signatures

  • Squirrelwaffle family
    squirrelwaffle
  • squirrelwaffle 1 IoCs

    Squirrelwaffle Payload

File Explorer

  • stage2.bin
    .dll 76KB

stage2.bin

  • SHA256 d6caf64597bd5e0803f7d0034e73195e83dae370450a2e890b82f77856830167
  • MD5 SHA1 SHA512
windowsx86regsvr32

  • squirrelwaffle

    Squirrelwaffle Payload