General
- Target ca8b17eb7317544f922f7e63b8b158c85ce0937841a83ccdd70ffd8e36acf940
- Size 199KB
- Sample220121-25f5vscch5
- SHA256 ca8b17eb7317544f922f7e63b8b158c85ce0937841a83ccdd70ffd8e36acf940
- MD5 fbe46a3e555a2fbfbdb3186ec9321c78
- SHA1 bab9fc71655a4b8ca329b1147adbe3e42ec3677e
- SHA512 8e1da6113a061e9a10a32a4ad019799865c61e7026d9be7ee8802288a9c3e9ec6b01dc06e16f94a71a5f8f8cd42bca939a4e2cc66dada15ff5e1056e0e23f54b
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
ca8b17eb7317544f922f7e63b8b158c85ce0937841a83ccdd70ffd8e36acf940.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
ca8b17eb7317544f922f7e63b8b158c85ce0937841a83ccdd70ffd8e36acf940.dll
Resource
win10-en-20211208
Malware Config
Extracted
-
squirrelwaffle
-
http://pop.vicamtaynam.com/VtyiHAft
-
http://snsvidyapeeth.in/aXmo2Dr3
-
http://trinitytesttubebaby.com/QR2JvfE3Sv
-
http://iconskw.com/cqdPtAbZ
-
http://ebookchuyennganh.com/v9PMvQDxHK8W
-
http://alsader.net/BHdQaiQ9rt
-
http://avyanshglobal.com/6pYjPlqf
-
http://primahills-online.com/ypCiZn7tMx
-
http://antoniocastroycia.com.co/WHe08obY
-
http://apexbiotech.net/VQgunQ4t5Ue
-
http://vscm.in/V3tYKxDz
-
http://sinaloworx.co.za/3GilA8Eo3r
-
http://dancongnghe.xyz/yRByhX6J3REI
-
http://trajesuniformes.com.br/qQofZMaJm
-
http://fiorenzapaes.com.br/PGYpETW7
-
http://astetinternational.com/arW5e44Y7vzO
-
http://razisystem.ir/MqvvkX0cWvn
-
http://krishnaiti.org.in/rWA02HQY4
Targets
-
- Target ca8b17eb7317544f922f7e63b8b158c85ce0937841a83ccdd70ffd8e36acf940
- Size 199KB
- SHA256 ca8b17eb7317544f922f7e63b8b158c85ce0937841a83ccdd70ffd8e36acf940
- MD5 fbe46a3e555a2fbfbdb3186ec9321c78
- SHA1 bab9fc71655a4b8ca329b1147adbe3e42ec3677e
- SHA512 8e1da6113a061e9a10a32a4ad019799865c61e7026d9be7ee8802288a9c3e9ec6b01dc06e16f94a71a5f8f8cd42bca939a4e2cc66dada15ff5e1056e0e23f54b
- MD5 SHA1 SHA512
Score10/10Squirrelwaffle Payload
Blocklisted process makes network request