General

  • Target

    2532083859417ec55d85a2412a678c2ff3219d473e6abfca158e4bc75ef8c8b9

  • Size

    64KB

  • MD5

    f9e519f958184c4e2150c7828bb1efea

  • SHA1

    cc64a670ded14c941ae690f59c47fa2abe3858c1

  • SHA256

    2532083859417ec55d85a2412a678c2ff3219d473e6abfca158e4bc75ef8c8b9

  • SHA512

    eb3d690a61f90908605780042acaf21d32c0a37973a0c74da5ad27b64fa99f9905a95e7b2cc33d1e553739d3d30e684d7f246201b335947ff65351d3ff4f4ec4

Score
10/10

Malware Config

Extracted

Family

squirrelwaffle

C2

http://msrsac.com/nvaaLwe9

http://u522712.gluweb.nl/n2fshwgq

http://serverplanner.com/LkkAWHLc8

http://bengali.iu.ac.bd/xNM4FTUzqRRk

http://owfix.net/NVNCI3qMl4

http://pcbsi.com.ph/IcLNSd9sO

http://enlacelaboral.com/3cKldxdt

Attributes
  • blocklist

    94.46.179.80

    206.189.205.251

    88.242.66.45

    36.65.102.42

    85.75.110.214

    93.78.214.187

    87.104.3.136

    207.244.91.171

    49.230.88.160

    91.149.252.75

    91.149.252.88

    92.211.109.152

    178.0.250.168

    178.203.145.135

    88.69.16.230

    95.223.77.160

    99.234.62.23

    2.206.105.223

    84.222.8.201

    89.183.239.142

    93.206.148.216

    5.146.132.101

    77.7.60.154

    45.41.106.122

    45.74.72.13

    74.58.152.123

    88.87.68.197

    211.107.25.121

    109.70.100.25

    185.67.82.114

Signatures

  • Squirrelwaffle Payload 1 IoCs
  • Squirrelwaffle family

Files

  • 2532083859417ec55d85a2412a678c2ff3219d473e6abfca158e4bc75ef8c8b9
    .dll windows x86


    Exports