Overview

overview

10

Static

static

10

c8f8edd887...08.dll

windows7_x64

1

c8f8edd887...08.dll

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c8f8edd8870c3117cc3e80b54e99576da02fd17a521e4cf85c10185d45b2c708

  • Size

    64KB

  • MD5

    22f4fe52068b39774d43a87114236586

  • SHA1

    6b6c060e341fc4d840a29fbeeb20aae395a121e3

  • SHA256

    c8f8edd8870c3117cc3e80b54e99576da02fd17a521e4cf85c10185d45b2c708

  • SHA512

    e9d72149addb5cfae21bbb376c23471fde57f1dd07ae6ab1e3234189f25de6e641781a0c2374ba2231f37abc9b1d7001929b15c672aa0f23fd9eba8e696f73b3

Score
10/10
squirrelwaffle

Malware Config

Extracted

Family

squirrelwaffle

C2

http://msrsac.com/nvaaLwe9

http://u522712.gluweb.nl/n2fshwgq

http://serverplanner.com/LkkAWHLc8

http://bengali.iu.ac.bd/xNM4FTUzqRRk

http://owfix.net/NVNCI3qMl4

http://pcbsi.com.ph/IcLNSd9sO

http://enlacelaboral.com/3cKldxdt
Attributes
  • blocklist

    94.46.179.80

    206.189.205.251

    88.242.66.45

    36.65.102.42

    85.75.110.214

    93.78.214.187

    87.104.3.136

    207.244.91.171

    49.230.88.160

    91.149.252.75

    91.149.252.88

    92.211.109.152

    178.0.250.168

    178.203.145.135

    88.69.16.230

    95.223.77.160

    99.234.62.23

    2.206.105.223

    84.222.8.201

    89.183.239.142

    93.206.148.216

    5.146.132.101

    77.7.60.154

    45.41.106.122

    45.74.72.13

    74.58.152.123

    88.87.68.197

    211.107.25.121

    109.70.100.25

    185.67.82.114

Signatures

  • Squirrelwaffle Payload 1 IoCs
  • Squirrelwaffle family
    squirrelwaffle

Files

  • c8f8edd8870c3117cc3e80b54e99576da02fd17a521e4cf85c10185d45b2c708
    .dll windows x86


    Exports