General
- Target 67a63fdf13aa81b714cd3513b452afec88671ad5930535a158fa995c116e603b
- Size 500KB
- Sample220121-3rhbfaddd9
- SHA256 67a63fdf13aa81b714cd3513b452afec88671ad5930535a158fa995c116e603b
- MD5 06c113520b7c6b424f9525a67769c4fb
- SHA1 34d450fba9d83ee269fe1c3efe40e0fdd3e48375
- SHA512 0e88ac42465687b94b4a8a7a85a53a6aec87d66b87dffecead26edbcab4693fa02c6361f96f6d60fb70f82bc7fbda6c7ba405a46fb984e0444a9db76fa1722b5
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
67a63fdf13aa81b714cd3513b452afec88671ad5930535a158fa995c116e603b.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
67a63fdf13aa81b714cd3513b452afec88671ad5930535a158fa995c116e603b.dll
Resource
win10-en-20211208
Malware Config
Extracted
-
squirrelwaffle
-
http://acdlimited.com/2u6aW9Pfe
-
http://jornaldasoficinas.com/ZF8GKIGVDupL
-
http://orldofjain.com/lMsTA7tSYpe
-
http://altayaralsudani.net/SSUsPgb7PHgC
-
http://hoteloaktree.com/QthLWsZsVgb
-
http://aterwellnessinc.com/U7D0sswwp
-
http://sirifinco.com/Urbhq9wO50j
-
http://ordpress17.com/5WG6Z62sKWo
-
http://mohsinkhanfoundation.com/pcQLeLMbur
-
http://lendbiz.vn/xj3BhHtMbf
-
http://geosever.rs/ObHP1CHt
-
http://nuevainfotech.com/xCNyTjzkoe
-
http://dadabhoy.pk/m6rQE94U
-
http://111
-
http://sjgrand.lk/zvMYuQqEZj
-
http://erogholding.com/GFM1QcCFk
-
http://armordetailing.rs/lgfrZb4Re6WO
-
http://lefrenchwineclub.com/eRUGdDox
Targets
-
- Target 67a63fdf13aa81b714cd3513b452afec88671ad5930535a158fa995c116e603b
- Size 500KB
- SHA256 67a63fdf13aa81b714cd3513b452afec88671ad5930535a158fa995c116e603b
- MD5 06c113520b7c6b424f9525a67769c4fb
- SHA1 34d450fba9d83ee269fe1c3efe40e0fdd3e48375
- SHA512 0e88ac42465687b94b4a8a7a85a53a6aec87d66b87dffecead26edbcab4693fa02c6361f96f6d60fb70f82bc7fbda6c7ba405a46fb984e0444a9db76fa1722b5
- MD5 SHA1 SHA512
Score10/10-
Squirrelwaffle Payload