Overview

overview

10

Static

static

10

ccd8a0988a...68.dll

windows7_x64

1

ccd8a0988a...68.dll

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ccd8a0988a8838566db9201af244a400700ae6ab4ee996cf062272c9a4767568

  • Size

    64KB

  • MD5

    f0063ff9d44aa5a3abbf1623cf03055b

  • SHA1

    4ca422db57bd8771daf8e2157a7cfce24a09a1c7

  • SHA256

    ccd8a0988a8838566db9201af244a400700ae6ab4ee996cf062272c9a4767568

  • SHA512

    ae2967251d55f3057f4f0d37fdf78cf8c7695c18d275577b3aa4a38ca2cba269b9ae2101d3c3c2bd12d70a1b1b9933363826c03f3100bc9e4dc658793f663338

Score
10/10
squirrelwaffle

Malware Config

Extracted

Family

squirrelwaffle

C2

http://msrsac.com/nvaaLwe9

http://u522712.gluweb.nl/n2fshwgq

http://serverplanner.com/LkkAWHLc8

http://bengali.iu.ac.bd/xNM4FTUzqRRk

http://owfix.net/NVNCI3qMl4

http://pcbsi.com.ph/IcLNSd9sO

http://enlacelaboral.com/3cKldxdt
Attributes
  • blocklist

    94.46.179.80

    206.189.205.251

    88.242.66.45

    36.65.102.42

    85.75.110.214

    93.78.214.187

    87.104.3.136

    207.244.91.171

    49.230.88.160

    91.149.252.75

    91.149.252.88

    92.211.109.152

    178.0.250.168

    178.203.145.135

    88.69.16.230

    95.223.77.160

    99.234.62.23

    2.206.105.223

    84.222.8.201

    89.183.239.142

    93.206.148.216

    5.146.132.101

    77.7.60.154

    45.41.106.122

    45.74.72.13

    74.58.152.123

    88.87.68.197

    211.107.25.121

    109.70.100.25

    185.67.82.114

Signatures

  • Squirrelwaffle Payload 1 IoCs
  • Squirrelwaffle family
    squirrelwaffle

Files

  • ccd8a0988a8838566db9201af244a400700ae6ab4ee996cf062272c9a4767568
    .dll windows x86


    Exports