General

  • Target

    4bfc09d8778add8c747270f83a46cacc222bceb8fee87dad1b152262be04ac14

  • Size

    300KB

  • Sample

    220130-serz1adea8

  • MD5

    aa69a5a760fa27550d69931bf5b0de07

  • SHA1

    8fefb35baa6ccb5fa2d0457e2b2e162c28b0f3b2

  • SHA256

    4bfc09d8778add8c747270f83a46cacc222bceb8fee87dad1b152262be04ac14

  • SHA512

    f107a9a8fbe3bfb0e35475bd193e01ccbb64919089c2f88f212c1b2f0d9330fd1373a8bac3a803013439fa60eeb0a3cf44c43800bd6be9a4412764d9e28e76f6

Malware Config

Extracted

Family

squirrelwaffle

C2

http://atertreat.in/5iPPVRKPPX9

http://incentivaconsultores.com.co/55jHpKCc9DWy

http://cdelean.org/0qvbbmu9g

http://bazy.ps/M6SjrMSYC

http://sukmabali.com/ZXxcLYs3rzRQ

http://bugwilliam.tk/cbB56YrugdbW

http://bestbeatsgh.com/42D7OwuPen

http://krumaila.com/UZ4NdDoDh4Tu

http://razehub.com/NN70nExbtLO

http://arcb.ro/aHUUNxE3Me5

http://cfmi.tg/m40YS6gDO0

http://sweetlittle.mx/ZCXP0dT2h

http://alkimia-prod.com/nT0imyzmo

http://almexperts.co.za/fEoJ3pdWZbF

Targets

    • Target

      4bfc09d8778add8c747270f83a46cacc222bceb8fee87dad1b152262be04ac14

    • Size

      300KB

    • MD5

      aa69a5a760fa27550d69931bf5b0de07

    • SHA1

      8fefb35baa6ccb5fa2d0457e2b2e162c28b0f3b2

    • SHA256

      4bfc09d8778add8c747270f83a46cacc222bceb8fee87dad1b152262be04ac14

    • SHA512

      f107a9a8fbe3bfb0e35475bd193e01ccbb64919089c2f88f212c1b2f0d9330fd1373a8bac3a803013439fa60eeb0a3cf44c43800bd6be9a4412764d9e28e76f6

    • SquirrelWaffle is a simple downloader written in C++.

      SquirrelWaffle.

    • Squirrelwaffle Payload

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks