General

  • Target
    ca8b17eb7317544f922f7e63b8b158c85ce0937841a83ccdd70ffd8e36acf940
  • Size 199KB
  • Sample220121-25f5vscch5
  • SHA256 ca8b17eb7317544f922f7e63b8b158c85ce0937841a83ccdd70ffd8e36acf940
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • squirrelwaffle

C2
  • http://pop.vicamtaynam.com/VtyiHAft

  • http://snsvidyapeeth.in/aXmo2Dr3

  • http://trinitytesttubebaby.com/QR2JvfE3Sv

  • http://iconskw.com/cqdPtAbZ

  • http://ebookchuyennganh.com/v9PMvQDxHK8W

  • http://alsader.net/BHdQaiQ9rt

  • http://avyanshglobal.com/6pYjPlqf

  • http://primahills-online.com/ypCiZn7tMx

  • http://antoniocastroycia.com.co/WHe08obY

  • http://apexbiotech.net/VQgunQ4t5Ue

  • http://vscm.in/V3tYKxDz

  • http://sinaloworx.co.za/3GilA8Eo3r

  • http://dancongnghe.xyz/yRByhX6J3REI

  • http://trajesuniformes.com.br/qQofZMaJm

  • http://fiorenzapaes.com.br/PGYpETW7

  • http://astetinternational.com/arW5e44Y7vzO

  • http://razisystem.ir/MqvvkX0cWvn

  • http://krishnaiti.org.in/rWA02HQY4

Targets

    • Target
      ca8b17eb7317544f922f7e63b8b158c85ce0937841a83ccdd70ffd8e36acf940
    • Size 199KB
    • SHA256 ca8b17eb7317544f922f7e63b8b158c85ce0937841a83ccdd70ffd8e36acf940
    • MD5 SHA1 SHA512
    • SquirrelWaffle is a simple downloader written in C++.

      SquirrelWaffle.

    • Squirrelwaffle Payload

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks