General

  • Target

    12f58b6560f5887c53b8e8e81dff635b11d98af9bd13e5c9472be685bba0134f

  • Size

    64KB

  • MD5

    85f4e6edb549d135f20cbb9ee12f5e9f

  • SHA1

    bbe2ae57c81fa9955f8c8fa351f056cfc14a50c2

  • SHA256

    12f58b6560f5887c53b8e8e81dff635b11d98af9bd13e5c9472be685bba0134f

  • SHA512

    16d21c5cccbf65aabf9c0ac0ee253d3218694dfa0196ab4b10afb55ecd9e1f4059ec2053aa033187aab2d623ba1ad4e3e90b60738289d646f265dfbb44ce4cf0

Score
10/10

Malware Config

Extracted

Family

squirrelwaffle

C2

http://atertreat.in/5iPPVRKPPX9

http://incentivaconsultores.com.co/55jHpKCc9DWy

http://cdelean.org/0qvbbmu9g

http://bazy.ps/M6SjrMSYC

http://sukmabali.com/ZXxcLYs3rzRQ

http://bugwilliam.tk/cbB56YrugdbW

http://bestbeatsgh.com/42D7OwuPen

http://krumaila.com/UZ4NdDoDh4Tu

http://razehub.com/NN70nExbtLO

http://arcb.ro/aHUUNxE3Me5

http://cfmi.tg/m40YS6gDO0

http://sweetlittle.mx/ZCXP0dT2h

http://alkimia-prod.com/nT0imyzmo

http://almexperts.co.za/fEoJ3pdWZbF

Signatures

  • Squirrelwaffle Payload 1 IoCs
  • Squirrelwaffle family

Files

  • 12f58b6560f5887c53b8e8e81dff635b11d98af9bd13e5c9472be685bba0134f
    .dll windows x86 regsvr32


    Exports