General

  • Target

    4059cece6ea7ec1dbd1a1bd8f3519136bd901927b0d5523a8c6b26f8a65ce1d5

  • Size

    62KB

  • MD5

    e1fe0f5099f8826b38dc6839689cd519

  • SHA1

    3d418d8c6caa34c7765c05247f9c31657683bc17

  • SHA256

    4059cece6ea7ec1dbd1a1bd8f3519136bd901927b0d5523a8c6b26f8a65ce1d5

  • SHA512

    cdc586c449ab7c9d31f00b0a9ceade28b4abf5ef9e84dd7d29ac9baddeeb785a1a714c0e8f8f1e96ef8c5b817dd764e7bb7812314c412777ca2aa0cf24e8418f

Score
10/10

Malware Config

Extracted

Family

squirrelwaffle

C2

http://hutraders.com/0eeUtmJf8O

http://goodartishard.com/0JXDM9kMwx

http://now.byteinsure.com/tnjUrmlhN

http://asceaub.com/Xl8UCLSU

http://colchonesmanzur.com/GjVgBnKaNIC

http://sistemasati.com/0SzGNkx6P

http://maldivehost.net/zLIisQRWZI9

http://lrdgon.org/l7r96tjAJ

http://binnawaz.com.pk/jhSZGWS76C

http://fhstorse.com/vJlgdjJnpIop

Signatures

  • Squirrelwaffle Payload 1 IoCs
  • Squirrelwaffle family

Files

  • 4059cece6ea7ec1dbd1a1bd8f3519136bd901927b0d5523a8c6b26f8a65ce1d5
    .dll windows x86 regsvr32


    Exports