Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ff4755aa5c8100176813198c04bf849677507f52c2613dca7ebb4f73c1b4041f

  • Size

    208KB

  • Sample

    220121-2rmqgsbga2

  • MD5

    585ffca5794b35db2e8163f929acaff5

  • SHA1

    3cb9a657743bac40d6eda0f36e06df34a69dfc8e

  • SHA256

    ff4755aa5c8100176813198c04bf849677507f52c2613dca7ebb4f73c1b4041f

  • SHA512

    e97502dfb7886fdd4ef8b41c913c916fc569ba60b8dc95664bd17dc864a524fce312af600851e7cb75d26915044af44a1a165708fe5b6414c0d62697a034f332

Malware Config

Extracted

Family

squirrelwaffle

C2

http://pop.vicamtaynam.com/VtyiHAft

http://snsvidyapeeth.in/aXmo2Dr3

http://trinitytesttubebaby.com/QR2JvfE3Sv

http://iconskw.com/cqdPtAbZ

http://ebookchuyennganh.com/v9PMvQDxHK8W

http://alsader.net/BHdQaiQ9rt

http://avyanshglobal.com/6pYjPlqf

http://primahills-online.com/ypCiZn7tMx

http://antoniocastroycia.com.co/WHe08obY

http://apexbiotech.net/VQgunQ4t5Ue

http://vscm.in/V3tYKxDz

http://sinaloworx.co.za/3GilA8Eo3r

http://dancongnghe.xyz/yRByhX6J3REI

http://trajesuniformes.com.br/qQofZMaJm

http://fiorenzapaes.com.br/PGYpETW7

http://astetinternational.com/arW5e44Y7vzO

http://razisystem.ir/MqvvkX0cWvn

http://krishnaiti.org.in/rWA02HQY4

Targets

    • Target

      ff4755aa5c8100176813198c04bf849677507f52c2613dca7ebb4f73c1b4041f

    • Size

      208KB

    • MD5

      585ffca5794b35db2e8163f929acaff5

    • SHA1

      3cb9a657743bac40d6eda0f36e06df34a69dfc8e

    • SHA256

      ff4755aa5c8100176813198c04bf849677507f52c2613dca7ebb4f73c1b4041f

    • SHA512

      e97502dfb7886fdd4ef8b41c913c916fc569ba60b8dc95664bd17dc864a524fce312af600851e7cb75d26915044af44a1a165708fe5b6414c0d62697a034f332

    • SquirrelWaffle is a simple downloader written in C++.

      SquirrelWaffle.

    • Squirrelwaffle Payload

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks