Overview

overview

10

Static

static

d718b0e17e...6d.dll

windows7_x64

10

d718b0e17e...6d.dll

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    d718b0e17e6dc671f63cf0e5740b377f351cdfba11dc17986f25bbdae0eaae6d
  • Size 202KB
  • Sample220121-22y69scear
  • SHA256 d718b0e17e6dc671f63cf0e5740b377f351cdfba11dc17986f25bbdae0eaae6d
  • MD5 SHA1 SHA512
Score
10/10
squirrelwaffledownloadersuricata

Malware Config

Extracted

Family

  • squirrelwaffle

C2

  • http://pop.vicamtaynam.com/VtyiHAft

  • http://snsvidyapeeth.in/aXmo2Dr3

  • http://trinitytesttubebaby.com/QR2JvfE3Sv

  • http://iconskw.com/cqdPtAbZ

  • http://ebookchuyennganh.com/v9PMvQDxHK8W

  • http://alsader.net/BHdQaiQ9rt

  • http://avyanshglobal.com/6pYjPlqf

  • http://primahills-online.com/ypCiZn7tMx

  • http://antoniocastroycia.com.co/WHe08obY

  • http://apexbiotech.net/VQgunQ4t5Ue

  • http://vscm.in/V3tYKxDz

  • http://sinaloworx.co.za/3GilA8Eo3r

  • http://dancongnghe.xyz/yRByhX6J3REI

  • http://trajesuniformes.com.br/qQofZMaJm

  • http://fiorenzapaes.com.br/PGYpETW7

  • http://astetinternational.com/arW5e44Y7vzO

  • http://razisystem.ir/MqvvkX0cWvn

  • http://krishnaiti.org.in/rWA02HQY4

Targets

    • Target
      d718b0e17e6dc671f63cf0e5740b377f351cdfba11dc17986f25bbdae0eaae6d
    • Size 202KB
    • SHA256 d718b0e17e6dc671f63cf0e5740b377f351cdfba11dc17986f25bbdae0eaae6d
    • MD5 SHA1 SHA512
    Score
    10/10
    squirrelwaffledownloadersuricata

    • SquirrelWaffle is a simple downloader written in C++.

      SquirrelWaffle.

      downloadersquirrelwaffle

    • suricata: ET MALWARE SQUIRRELWAFFLE Loader Activity (POST)

      suricata: ET MALWARE SQUIRRELWAFFLE Loader Activity (POST)

      suricata

    • Squirrelwaffle Payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks