Overview

overview

10

Static

static

da031faf0a...1).dll

windows7_x64

10

da031faf0a...1).dll

windows10_x64

10

Resubmissions

14/10/2021, 12:23

211014-pkhrqsaccp10

06/10/2021, 13:07

211006-qc4vnsbdem10

06/10/2021, 07:58

211006-jtztqaagc410

Sharing

Copy URL Twitter E-mail

General

  • Target
    da031faf0a918be7bf90705dac2ce63cfda65226360202ac1d53a6849592e9b3 (1)
  • Size 475KB
  • Sample211006-qc4vnsbdem
  • SHA256 da031faf0a918be7bf90705dac2ce63cfda65226360202ac1d53a6849592e9b3
  • MD5 SHA1 SHA512
Score
10/10
squirrelwaffledownloadersuricata

Malware Config

Extracted

Family

  • squirrelwaffle

C2

  • http://profitshub.in/eJDLM6siEv

  • http://hynot-adventures.com/siRmGWRAqRR

  • http://giversherbalproducts.com/lBawcxb5

  • http://opulent-imports.com/DlOBqKAf

  • http://nitro2point0.com/9SqebpSMu

  • http://streamline-trade.com/7fTwg0V7

  • http://sologicgroup.com/hWo6FObvrdp

  • http://pedroaros.cl/gnYxifRY

  • http://apimar.eu/QFm9qbfjT

  • http://baetrading.com/IfpAV6qS

  • http://ditrpshop.in/oHbAKuM0

  • http://surveillantfire.com/s6ImD3DAJs

  • http://dhananialegalaid.com/VIVB6kFar

  • http://aulaintelimundo.com/n1n3Sh4NSO08

  • http://muwatin.net/IvyhnWs8j

  • http://nkp.hr/a9TmwEDR

  • http://kvrassociates.net/Y3kzp0WtE0

  • http://marianaleyton.com/4ByNgaVdId6

Targets

    • Target
      da031faf0a918be7bf90705dac2ce63cfda65226360202ac1d53a6849592e9b3 (1)
    • Size 475KB
    • SHA256 da031faf0a918be7bf90705dac2ce63cfda65226360202ac1d53a6849592e9b3
    • MD5 SHA1 SHA512
    Score
    10/10
    squirrelwaffledownloadersuricata

    • SquirrelWaffle is a simple downloader written in C++.

      SquirrelWaffle.

      downloadersquirrelwaffle

    • suricata: ET MALWARE SQUIRRELWAFFLE Loader Activity (POST)

      suricata: ET MALWARE SQUIRRELWAFFLE Loader Activity (POST)

      suricata

    • Squirrelwaffle Payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks