Overview

overview

10

Static

static

10

4059cece6e...d5.dll

windows7_x64

1

4059cece6e...d5.dll

windows10_x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    4059cece6ea7ec1dbd1a1bd8f3519136bd901927b0d5523a8c6b26f8a65ce1d5
  • Size 62KB
  • Sample211113-v6hlrafcc9
  • SHA256 4059cece6ea7ec1dbd1a1bd8f3519136bd901927b0d5523a8c6b26f8a65ce1d5
  • MD5 SHA1 SHA512
Score
10/10
squirrelwaffle

Malware Config

Extracted

Family

  • squirrelwaffle

C2

  • http://hutraders.com/0eeUtmJf8O

  • http://goodartishard.com/0JXDM9kMwx

  • http://now.byteinsure.com/tnjUrmlhN

  • http://asceaub.com/Xl8UCLSU

  • http://colchonesmanzur.com/GjVgBnKaNIC

  • http://sistemasati.com/0SzGNkx6P

  • http://maldivehost.net/zLIisQRWZI9

  • http://lrdgon.org/l7r96tjAJ

  • http://binnawaz.com.pk/jhSZGWS76C

  • http://fhstorse.com/vJlgdjJnpIop

Signatures

  • Squirrelwaffle Payload 1 IoCs
  • Squirrelwaffle family
    squirrelwaffle

File Explorer

  • 4059cece6ea7ec1dbd1a1bd8f3519136bd901927b0d5523a8c6b26f8a65ce1d5
    .dll 62KB

4059cece6ea7ec1dbd1a1bd8f3519136bd901927b0d5523a8c6b26f8a65ce1d5

  • SHA256 4059cece6ea7ec1dbd1a1bd8f3519136bd901927b0d5523a8c6b26f8a65ce1d5
  • MD5 SHA1 SHA512
windowsx86regsvr32

  • Squirrelwaffle Payload