General

  • Target
    0b77d31986f63795fc21ee5550c830b82c03e5fb66614493579272ee257e94b0
  • Size 101KB
  • Sample211113-v6gdpafcc4
  • SHA256 0b77d31986f63795fc21ee5550c830b82c03e5fb66614493579272ee257e94b0
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Extracted

Family
  • squirrelwaffle

C2
  • http://acdlimited.com/2u6aW9Pfe

  • http://jornaldasoficinas.com/ZF8GKIGVDupL

  • http://orldofjain.com/lMsTA7tSYpe

  • http://altayaralsudani.net/SSUsPgb7PHgC

  • http://hoteloaktree.com/QthLWsZsVgb

  • http://aterwellnessinc.com/U7D0sswwp

  • http://sirifinco.com/Urbhq9wO50j

  • http://ordpress17.com/5WG6Z62sKWo

  • http://mohsinkhanfoundation.com/pcQLeLMbur

  • http://lendbiz.vn/xj3BhHtMbf

  • http://geosever.rs/ObHP1CHt

  • http://nuevainfotech.com/xCNyTjzkoe

  • http://dadabhoy.pk/m6rQE94U

  • http://111

  • http://sjgrand.lk/zvMYuQqEZj

  • http://erogholding.com/GFM1QcCFk

  • http://armordetailing.rs/lgfrZb4Re6WO

  • http://lefrenchwineclub.com/eRUGdDox

Signatures

  • Squirrelwaffle Payload 1 IoCs
  • Squirrelwaffle family

File Explorer

  • 0b77d31986f63795fc21ee5550c830b82c03e5fb66614493579272ee257e94b0
    .dll 101KB

0b77d31986f63795fc21ee5550c830b82c03e5fb66614493579272ee257e94b0

  • SHA256 0b77d31986f63795fc21ee5550c830b82c03e5fb66614493579272ee257e94b0
  • MD5 SHA1 SHA512
  • Squirrelwaffle Payload