General

  • Target

    aca485160e43138fabceca42cd680f9a0e3ec31e386a9c25df3cbb3a9b2a9935

  • Size

    64KB

  • Sample

    211113-v6kq4sccbm

  • MD5

    be8d59bd1e83b5f5593fd5c3fb62b0fa

  • SHA1

    4a056486aa431e9f1645d9d4c59913278249e8dd

  • SHA256

    aca485160e43138fabceca42cd680f9a0e3ec31e386a9c25df3cbb3a9b2a9935

  • SHA512

    c697a9353d1187f850779d9d0a1d2da4d7f85d5aed908681aaa1f81beb025cfffe92bf76204a8755e5f15d2ab92496e214afcb34e10de050f993281f6dc3aa24

Malware Config

Extracted

Family

squirrelwaffle

C2

http://hutraders.com/0eeUtmJf8O

http://goodartishard.com/0JXDM9kMwx

http://now.byteinsure.com/tnjUrmlhN

http://asceaub.com/Xl8UCLSU

http://colchonesmanzur.com/GjVgBnKaNIC

http://sistemasati.com/0SzGNkx6P

http://maldivehost.net/zLIisQRWZI9

http://lrdgon.org/l7r96tjAJ

http://binnawaz.com.pk/jhSZGWS76C

http://fhstorse.com/vJlgdjJnpIop

Targets

    • Target

      aca485160e43138fabceca42cd680f9a0e3ec31e386a9c25df3cbb3a9b2a9935

    • Size

      64KB

    • MD5

      be8d59bd1e83b5f5593fd5c3fb62b0fa

    • SHA1

      4a056486aa431e9f1645d9d4c59913278249e8dd

    • SHA256

      aca485160e43138fabceca42cd680f9a0e3ec31e386a9c25df3cbb3a9b2a9935

    • SHA512

      c697a9353d1187f850779d9d0a1d2da4d7f85d5aed908681aaa1f81beb025cfffe92bf76204a8755e5f15d2ab92496e214afcb34e10de050f993281f6dc3aa24

    Score
    10/10
    • suricata: ET MALWARE SQUIRRELWAFFLE Loader Activity (POST)

      suricata: ET MALWARE SQUIRRELWAFFLE Loader Activity (POST)

MITRE ATT&CK Matrix

Tasks