Overview

overview

10

Static

static

42ceb4c68a...bd.dll

windows7_x64

10

42ceb4c68a...bd.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    42ceb4c68a7d4eaf87843e10856d6dab0d749cc6de525af37c94d66f942b27bd

  • Size

    206KB

  • Sample

    220130-smaexsdff3

  • MD5

    659aa828fa92a0864b4dd1bf9feef6a8

  • SHA1

    f7d5ad5957689c9617a1edfa8a1c3703ed2ce26d

  • SHA256

    42ceb4c68a7d4eaf87843e10856d6dab0d749cc6de525af37c94d66f942b27bd

  • SHA512

    e7ede9928dcef6530b71916d142e0970426b4bab8ae01a78c30c1a6bd4d6c0385fa14f9b5253c147532a6c688f8e8b2569fa808102b1285501e0bd53e22d1ece

Score
10/10
squirrelwaffledownloader

Malware Config

Extracted

Family

squirrelwaffle

C2

http://hutraders.com/0eeUtmJf8O

http://goodartishard.com/0JXDM9kMwx

http://now.byteinsure.com/tnjUrmlhN

http://asceaub.com/Xl8UCLSU

http://colchonesmanzur.com/GjVgBnKaNIC

http://sistemasati.com/0SzGNkx6P

http://maldivehost.net/zLIisQRWZI9

http://lrdgon.org/l7r96tjAJ

http://binnawaz.com.pk/jhSZGWS76C

http://fhstorse.com/vJlgdjJnpIop

Targets

    • Target

      42ceb4c68a7d4eaf87843e10856d6dab0d749cc6de525af37c94d66f942b27bd

    • Size

      206KB

    • MD5

      659aa828fa92a0864b4dd1bf9feef6a8

    • SHA1

      f7d5ad5957689c9617a1edfa8a1c3703ed2ce26d

    • SHA256

      42ceb4c68a7d4eaf87843e10856d6dab0d749cc6de525af37c94d66f942b27bd

    • SHA512

      e7ede9928dcef6530b71916d142e0970426b4bab8ae01a78c30c1a6bd4d6c0385fa14f9b5253c147532a6c688f8e8b2569fa808102b1285501e0bd53e22d1ece

    Score
    10/10
    squirrelwaffledownloader

    • SquirrelWaffle is a simple downloader written in C++.

      SquirrelWaffle.

      downloadersquirrelwaffle

    • Squirrelwaffle Payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks