General

  • Target

    02a1329fd597628c5fd841debb13cdbb5ddb7d9ffb2c2f4ba01deee425474823

  • Size

    456KB

  • Sample

    220130-t9xz6seehm

  • MD5

    256bb077ba25f5afd8a869998487d7f8

  • SHA1

    28f7ec1c8e7fd1df127ad9e65a9e882f64010764

  • SHA256

    02a1329fd597628c5fd841debb13cdbb5ddb7d9ffb2c2f4ba01deee425474823

  • SHA512

    a930c0a671a13271c40ca2ccbf5296ee7d905cd177ff68c840a2c689c96be0ed04d9802e87b0d5d262e1ab1a19afc74b5aaf49728390c7bc563530cb53e4dd07

Malware Config

Extracted

Family

squirrelwaffle

C2

http://deanandwilconstruction.com/UXEvfuIlhws

http://arimeto.lv/Nm70oAfwB

http://gitamschool.com/oZbs0Oqw7uv

http://eresourcesmoneymarket.com/JbVwdgaV6l

http://flyershipmanager.com/SGAsORYsywt

Attributes
  • blocklist

    94.46.179.80

    206.189.205.251

    88.242.66.45

    85.75.110.214

    87.104.3.136

    207.244.91.171

    49.230.88.160

    91.149.252.75

    91.149.252.88

    92.211.109.152

    178.0.250.168

    88.69.16.230

    95.223.77.160

    99.234.62.23

    2.206.105.223

    84.222.8.201

    89.183.239.142

    5.146.132.101

    77.7.60.154

    45.41.106.122

    45.74.72.13

    74.58.152.123

    88.87.68.197

    109.70.100.25

    185.67.82.114

    207.102.138.19

    204.101.161.14

    193.128.108.251

    111.7.100.17

    111.7.100.16

Targets

    • Target

      02a1329fd597628c5fd841debb13cdbb5ddb7d9ffb2c2f4ba01deee425474823

    • Size

      456KB

    • MD5

      256bb077ba25f5afd8a869998487d7f8

    • SHA1

      28f7ec1c8e7fd1df127ad9e65a9e882f64010764

    • SHA256

      02a1329fd597628c5fd841debb13cdbb5ddb7d9ffb2c2f4ba01deee425474823

    • SHA512

      a930c0a671a13271c40ca2ccbf5296ee7d905cd177ff68c840a2c689c96be0ed04d9802e87b0d5d262e1ab1a19afc74b5aaf49728390c7bc563530cb53e4dd07

MITRE ATT&CK Matrix

Tasks