General

  • Target

    925b05f137cea0396c099e9908f007eff1ff73fb865c69fcc67f70c4e601fd81

  • Size

    359KB

  • Sample

    220121-3gpmrsdcfl

  • MD5

    a8cd90cc3cc55fdb6a0cb1ac98a8700a

  • SHA1

    dbe253a8550959bbb9cabcb2293c47d00f9141ca

  • SHA256

    925b05f137cea0396c099e9908f007eff1ff73fb865c69fcc67f70c4e601fd81

  • SHA512

    25b40c3dd70050144e0ddb80bf9be6a69f011724f83efe8517217b91888e7633636507df6b913f2b07b7685954b1f4f3fc7d818710201392cced5fb7a9ee4260

Malware Config

Extracted

Family

squirrelwaffle

C2

http://msrsac.com/nvaaLwe9

http://u522712.gluweb.nl/n2fshwgq

http://serverplanner.com/LkkAWHLc8

http://bengali.iu.ac.bd/xNM4FTUzqRRk

http://owfix.net/NVNCI3qMl4

http://pcbsi.com.ph/IcLNSd9sO

http://enlacelaboral.com/3cKldxdt

Attributes
  • blocklist

    94.46.179.80

    206.189.205.251

    88.242.66.45

    36.65.102.42

    85.75.110.214

    93.78.214.187

    87.104.3.136

    207.244.91.171

    49.230.88.160

    91.149.252.75

    91.149.252.88

    92.211.109.152

    178.0.250.168

    178.203.145.135

    88.69.16.230

    95.223.77.160

    99.234.62.23

    2.206.105.223

    84.222.8.201

    89.183.239.142

    93.206.148.216

    5.146.132.101

    77.7.60.154

    45.41.106.122

    45.74.72.13

    74.58.152.123

    88.87.68.197

    211.107.25.121

    109.70.100.25

    185.67.82.114

Targets

    • Target

      925b05f137cea0396c099e9908f007eff1ff73fb865c69fcc67f70c4e601fd81

    • Size

      359KB

    • MD5

      a8cd90cc3cc55fdb6a0cb1ac98a8700a

    • SHA1

      dbe253a8550959bbb9cabcb2293c47d00f9141ca

    • SHA256

      925b05f137cea0396c099e9908f007eff1ff73fb865c69fcc67f70c4e601fd81

    • SHA512

      25b40c3dd70050144e0ddb80bf9be6a69f011724f83efe8517217b91888e7633636507df6b913f2b07b7685954b1f4f3fc7d818710201392cced5fb7a9ee4260

MITRE ATT&CK Matrix

Tasks