Overview

overview

10

Static

static

10

12f58b6560...4f.dll

windows7_x64

1

12f58b6560...4f.dll

windows10_x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    12f58b6560f5887c53b8e8e81dff635b11d98af9bd13e5c9472be685bba0134f
  • Size 64KB
  • Sample211113-v6gpfsfcc5
  • SHA256 12f58b6560f5887c53b8e8e81dff635b11d98af9bd13e5c9472be685bba0134f
  • MD5 SHA1 SHA512
Score
10/10
squirrelwaffle

Malware Config

Extracted

Family

  • squirrelwaffle

C2

  • http://atertreat.in/5iPPVRKPPX9

  • http://incentivaconsultores.com.co/55jHpKCc9DWy

  • http://cdelean.org/0qvbbmu9g

  • http://bazy.ps/M6SjrMSYC

  • http://sukmabali.com/ZXxcLYs3rzRQ

  • http://bugwilliam.tk/cbB56YrugdbW

  • http://bestbeatsgh.com/42D7OwuPen

  • http://krumaila.com/UZ4NdDoDh4Tu

  • http://razehub.com/NN70nExbtLO

  • http://arcb.ro/aHUUNxE3Me5

  • http://cfmi.tg/m40YS6gDO0

  • http://sweetlittle.mx/ZCXP0dT2h

  • http://alkimia-prod.com/nT0imyzmo

  • http://almexperts.co.za/fEoJ3pdWZbF

Signatures

  • Squirrelwaffle Payload 1 IoCs
  • Squirrelwaffle family
    squirrelwaffle

File Explorer

  • 12f58b6560f5887c53b8e8e81dff635b11d98af9bd13e5c9472be685bba0134f
    .dll 64KB

12f58b6560f5887c53b8e8e81dff635b11d98af9bd13e5c9472be685bba0134f

  • SHA256 12f58b6560f5887c53b8e8e81dff635b11d98af9bd13e5c9472be685bba0134f
  • MD5 SHA1 SHA512
windowsx86regsvr32

  • Squirrelwaffle Payload