General

  • Target

    797e50b7fe9331b288b325d8559b3308f9e42d74c5c6a93e78228c38999d584e

  • Size

    456KB

  • Sample

    220121-3m6s8sdcb5

  • MD5

    ede8aba00e8cdc69d7a92e7ba2bcd0a8

  • SHA1

    84501c620dafe8847975b981bddb67cabbf08d3e

  • SHA256

    797e50b7fe9331b288b325d8559b3308f9e42d74c5c6a93e78228c38999d584e

  • SHA512

    1f39e94d7a67e3e721006415621ab9e659c672107e7ca202e49e9eb8b6be9b4ee4227ebf6b7ee8c507fa1d3c6994d506f560511feb1bc0ffed795485835a6628

Malware Config

Extracted

Family

squirrelwaffle

C2

http://deanandwilconstruction.com/UXEvfuIlhws

http://arimeto.lv/Nm70oAfwB

http://gitamschool.com/oZbs0Oqw7uv

http://eresourcesmoneymarket.com/JbVwdgaV6l

http://flyershipmanager.com/SGAsORYsywt

Attributes
  • blocklist

    94.46.179.80

    206.189.205.251

    88.242.66.45

    85.75.110.214

    87.104.3.136

    207.244.91.171

    49.230.88.160

    91.149.252.75

    91.149.252.88

    92.211.109.152

    178.0.250.168

    88.69.16.230

    95.223.77.160

    99.234.62.23

    2.206.105.223

    84.222.8.201

    89.183.239.142

    5.146.132.101

    77.7.60.154

    45.41.106.122

    45.74.72.13

    74.58.152.123

    88.87.68.197

    109.70.100.25

    185.67.82.114

    207.102.138.19

    204.101.161.14

    193.128.108.251

    111.7.100.17

    111.7.100.16

Targets

    • Target

      797e50b7fe9331b288b325d8559b3308f9e42d74c5c6a93e78228c38999d584e

    • Size

      456KB

    • MD5

      ede8aba00e8cdc69d7a92e7ba2bcd0a8

    • SHA1

      84501c620dafe8847975b981bddb67cabbf08d3e

    • SHA256

      797e50b7fe9331b288b325d8559b3308f9e42d74c5c6a93e78228c38999d584e

    • SHA512

      1f39e94d7a67e3e721006415621ab9e659c672107e7ca202e49e9eb8b6be9b4ee4227ebf6b7ee8c507fa1d3c6994d506f560511feb1bc0ffed795485835a6628

MITRE ATT&CK Matrix

Tasks