Resubmissions

04-10-2021 13:37

211004-qxa34agdhl 10

04-10-2021 13:19

211004-qkqm1sgdfn 10

General

  • Target

    test2.test

  • Size

    468KB

  • Sample

    211004-qkqm1sgdfn

  • MD5

    5ac65b28e1852283c612ca7e1aaa7d3f

  • SHA1

    da1277f3549453023446290bf5d278c89343ffa5

  • SHA256

    dd372a40f76e4df61316e014ac9e25a36981e07d9064944776ce41d933e19530

  • SHA512

    c16ce4e628b8564b955d8d322a1d13af90831c6638b97547c720fb6706603b1f30542298aa11eb39494d9dea7284eab6233cee6a06b57e3a51e16342abfc11b0

Malware Config

Extracted

Family

squirrelwaffle

C2

profitshub.in/eJDLM6siEv

hynot-adventures.com/siRmGWRAqRR

giversherbalproducts.com/lBawcxb5

opulent-imports.com/DlOBqKAf

nitro2point0.com/9SqebpSMu

streamline-trade.com/7fTwg0V7

sologicgroup.com/hWo6FObvrdp

pedroaros.cl/gnYxifRY

apimar.eu/QFm9qbfjT

baetrading.com/IfpAV6qS

ditrpshop.in/oHbAKuM0

surveillantfire.com/s6ImD3DAJs

dhananialegalaid.com/VIVB6kFar

aulaintelimundo.com/n1n3Sh4NSO08

muwatin.net/IvyhnWs8j

nkp.hr/a9TmwEDR

kvrassociates.net/Y3kzp0WtE0

marianaleyton.com/4ByNgaVdId6

Targets

    • Target

      test2.test

    • Size

      468KB

    • MD5

      5ac65b28e1852283c612ca7e1aaa7d3f

    • SHA1

      da1277f3549453023446290bf5d278c89343ffa5

    • SHA256

      dd372a40f76e4df61316e014ac9e25a36981e07d9064944776ce41d933e19530

    • SHA512

      c16ce4e628b8564b955d8d322a1d13af90831c6638b97547c720fb6706603b1f30542298aa11eb39494d9dea7284eab6233cee6a06b57e3a51e16342abfc11b0

    • SquirrelWaffle is a simple downloader written in C++.

      SquirrelWaffle.

    • suricata: ET MALWARE SQUIRRELWAFFLE Loader Activity (POST)

      suricata: ET MALWARE SQUIRRELWAFFLE Loader Activity (POST)

    • squirrelwaffle

      Squirrelwaffle Payload

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks