General

  • Target

    6095f96dd5eca96a3fb9338eec4ab574921c0febb36f6a6db60aae1aeb9ffcab

  • Size

    72KB

  • MD5

    dd6257665f634b5566e15bc62e90c809

  • SHA1

    54ded03f7b82c8aa4de10e673b556d0ba778177d

  • SHA256

    6095f96dd5eca96a3fb9338eec4ab574921c0febb36f6a6db60aae1aeb9ffcab

  • SHA512

    60e6297803141206a2ef9c30c028fb87581205623774e4c43ef4566dd42b61faf8d85fb3ddca2ec516448500dd392c01bdfb781c1bacd38b6c0a04837237eb85

Score
10/10

Malware Config

Extracted

Family

squirrelwaffle

C2

http://celulasmadreenmexico.com.mx/Wt793Aua

http://gerencial.institutoacqua.org.br/XynFkhJAxnm

http://dashboard.adlytic.ai/LlvLoc9O3

http://bussiness-z.ml/3pdEiqsni

http://ifiengineers.com/hGVc55g2e

http://bonusvulkanvegas.srdm.in/U7oOxmI1m

http://ebrouteindia.com/JEqGe1hNR

http://test.dirigu.ro/dXf4cS4GPL

http://cablingpoint.com/LjDG0hkp

http://perfectdemos.com/T6PQGYCMt

http://afrizam.360cyberlink.com/f36rjSN5D1

http://giasuphire.tddvn.com/miFO43YP9b

http://priyacareers.com/GiTHMPbU

http://assurant.360cyberlink.com/DGx4k8U9Hil

http://sig.institutoacqua.org.br/tM7tINg2sCU

Attributes
  • blocklist

    94.46.179.80

    206.189.205.251

    88.242.66.45

    85.75.110.214

    87.104.3.136

    207.244.91.171

    49.230.88.160

    91.149.252.75

    91.149.252.88

    92.211.109.152

    178.0.250.168

    88.69.16.230

    95.223.77.160

    99.234.62.23

    2.206.105.223

    84.222.8.201

    89.183.239.142

    5.146.132.101

    77.7.60.154

    45.41.106.122

    45.74.72.13

    74.58.152.123

    88.87.68.197

    109.70.100.25

    185.67.82.114

    207.102.138.19

    204.101.161.14

    193.128.108.251

    111.7.100.17

    111.7.100.16

Signatures

  • Squirrelwaffle Payload 1 IoCs
  • Squirrelwaffle family

Files

  • 6095f96dd5eca96a3fb9338eec4ab574921c0febb36f6a6db60aae1aeb9ffcab
    .dll windows x86


    Exports