General

  • Target

    test.test

  • Size

    358KB

  • Sample

    211026-pk2vlshdc3

  • MD5

    d59f026dcad1221e477378af85dc625a

  • SHA1

    2885bff21d432290b96ec81de0589275bf3756b0

  • SHA256

    a6f5ef4aca1db5477e051899e3992e3298b4bacd2877aa9f71dc2168f322b22f

  • SHA512

    e96ecf1d0e98d01ddff701bcfb78891c1ee7d84f1f4a088d0940675d895a697200abe4b4d6f80b20055b0d654c605f86eba663dc9062c8ede9e884d893e20571

Malware Config

Extracted

Family

squirrelwaffle

C2

http://alcorbogaindonesia.com/9poRAbODT

http://mediacionmelipilla.cl/4ugcVLVzG

http://escenachile.cl/qflR3r5quK

http://tuskmelon.com/1i4FIOfE

http://omni-safe.mx/VxkvGWrsNk

http://hitehousepropertydevelopers.com/P5qmwoxY

http://nvamirada.cl/SLilOXk1M

http://promjene.org/40crEYMiWiD

http://anastasiayyc.com/oR7uF1h3VkOv

http://jungla-lat.cl/gvwPyfsAIrt

Targets

    • Target

      test.test

    • Size

      358KB

    • MD5

      d59f026dcad1221e477378af85dc625a

    • SHA1

      2885bff21d432290b96ec81de0589275bf3756b0

    • SHA256

      a6f5ef4aca1db5477e051899e3992e3298b4bacd2877aa9f71dc2168f322b22f

    • SHA512

      e96ecf1d0e98d01ddff701bcfb78891c1ee7d84f1f4a088d0940675d895a697200abe4b4d6f80b20055b0d654c605f86eba663dc9062c8ede9e884d893e20571

    • SquirrelWaffle is a simple downloader written in C++.

      SquirrelWaffle.

    • Squirrelwaffle Payload

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks