General

  • Target

    aca485160e43138fabceca42cd680f9a0e3ec31e386a9c25df3cbb3a9b2a9935

  • Size

    64KB

  • MD5

    be8d59bd1e83b5f5593fd5c3fb62b0fa

  • SHA1

    4a056486aa431e9f1645d9d4c59913278249e8dd

  • SHA256

    aca485160e43138fabceca42cd680f9a0e3ec31e386a9c25df3cbb3a9b2a9935

  • SHA512

    c697a9353d1187f850779d9d0a1d2da4d7f85d5aed908681aaa1f81beb025cfffe92bf76204a8755e5f15d2ab92496e214afcb34e10de050f993281f6dc3aa24

Score
10/10

Malware Config

Extracted

Family

squirrelwaffle

C2

http://hutraders.com/0eeUtmJf8O

http://goodartishard.com/0JXDM9kMwx

http://now.byteinsure.com/tnjUrmlhN

http://asceaub.com/Xl8UCLSU

http://colchonesmanzur.com/GjVgBnKaNIC

http://sistemasati.com/0SzGNkx6P

http://maldivehost.net/zLIisQRWZI9

http://lrdgon.org/l7r96tjAJ

http://binnawaz.com.pk/jhSZGWS76C

http://fhstorse.com/vJlgdjJnpIop

Signatures

  • Squirrelwaffle Payload 1 IoCs
  • Squirrelwaffle family

Files

  • aca485160e43138fabceca42cd680f9a0e3ec31e386a9c25df3cbb3a9b2a9935
    .dll windows x86 regsvr32


    Exports