General

  • Target

    ca8b17eb7317544f922f7e63b8b158c85ce0937841a83ccdd70ffd8e36acf940

  • Size

    199KB

  • Sample

    220121-25f5vscch5

  • MD5

    fbe46a3e555a2fbfbdb3186ec9321c78

  • SHA1

    bab9fc71655a4b8ca329b1147adbe3e42ec3677e

  • SHA256

    ca8b17eb7317544f922f7e63b8b158c85ce0937841a83ccdd70ffd8e36acf940

  • SHA512

    8e1da6113a061e9a10a32a4ad019799865c61e7026d9be7ee8802288a9c3e9ec6b01dc06e16f94a71a5f8f8cd42bca939a4e2cc66dada15ff5e1056e0e23f54b

Malware Config

Extracted

Family

squirrelwaffle

C2

http://pop.vicamtaynam.com/VtyiHAft

http://snsvidyapeeth.in/aXmo2Dr3

http://trinitytesttubebaby.com/QR2JvfE3Sv

http://iconskw.com/cqdPtAbZ

http://ebookchuyennganh.com/v9PMvQDxHK8W

http://alsader.net/BHdQaiQ9rt

http://avyanshglobal.com/6pYjPlqf

http://primahills-online.com/ypCiZn7tMx

http://antoniocastroycia.com.co/WHe08obY

http://apexbiotech.net/VQgunQ4t5Ue

http://vscm.in/V3tYKxDz

http://sinaloworx.co.za/3GilA8Eo3r

http://dancongnghe.xyz/yRByhX6J3REI

http://trajesuniformes.com.br/qQofZMaJm

http://fiorenzapaes.com.br/PGYpETW7

http://astetinternational.com/arW5e44Y7vzO

http://razisystem.ir/MqvvkX0cWvn

http://krishnaiti.org.in/rWA02HQY4

Targets

    • Target

      ca8b17eb7317544f922f7e63b8b158c85ce0937841a83ccdd70ffd8e36acf940

    • Size

      199KB

    • MD5

      fbe46a3e555a2fbfbdb3186ec9321c78

    • SHA1

      bab9fc71655a4b8ca329b1147adbe3e42ec3677e

    • SHA256

      ca8b17eb7317544f922f7e63b8b158c85ce0937841a83ccdd70ffd8e36acf940

    • SHA512

      8e1da6113a061e9a10a32a4ad019799865c61e7026d9be7ee8802288a9c3e9ec6b01dc06e16f94a71a5f8f8cd42bca939a4e2cc66dada15ff5e1056e0e23f54b

    • SquirrelWaffle is a simple downloader written in C++.

      SquirrelWaffle.

    • Squirrelwaffle Payload

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks