General

  • Target

    277df0da1e48fff2fcd9f6bf3ecdf7f085d9ddfba6a3aa7648a64efc2327d263

  • Size

    322KB

  • Sample

    220130-ta7qbsece8

  • MD5

    1eab6f2d550e2c206ea46bc084806c9d

  • SHA1

    457e2e6195df1d9be6d8df0091d40f926f4f0a2e

  • SHA256

    277df0da1e48fff2fcd9f6bf3ecdf7f085d9ddfba6a3aa7648a64efc2327d263

  • SHA512

    0a0c5a0925f9c69b1761fa77ce047b4d8b9c24baeb715a76a0ad9a62b64869ed8b3c58a2df99bfed9b2f56bf6d851522e9c49e5fd4e0031100b1c0f97c0042d5

Malware Config

Extracted

Family

squirrelwaffle

C2

http://atertreat.in/5iPPVRKPPX9

http://incentivaconsultores.com.co/55jHpKCc9DWy

http://cdelean.org/0qvbbmu9g

http://bazy.ps/M6SjrMSYC

http://sukmabali.com/ZXxcLYs3rzRQ

http://bugwilliam.tk/cbB56YrugdbW

http://bestbeatsgh.com/42D7OwuPen

http://krumaila.com/UZ4NdDoDh4Tu

http://razehub.com/NN70nExbtLO

http://arcb.ro/aHUUNxE3Me5

http://cfmi.tg/m40YS6gDO0

http://sweetlittle.mx/ZCXP0dT2h

http://alkimia-prod.com/nT0imyzmo

http://almexperts.co.za/fEoJ3pdWZbF

Targets

    • Target

      277df0da1e48fff2fcd9f6bf3ecdf7f085d9ddfba6a3aa7648a64efc2327d263

    • Size

      322KB

    • MD5

      1eab6f2d550e2c206ea46bc084806c9d

    • SHA1

      457e2e6195df1d9be6d8df0091d40f926f4f0a2e

    • SHA256

      277df0da1e48fff2fcd9f6bf3ecdf7f085d9ddfba6a3aa7648a64efc2327d263

    • SHA512

      0a0c5a0925f9c69b1761fa77ce047b4d8b9c24baeb715a76a0ad9a62b64869ed8b3c58a2df99bfed9b2f56bf6d851522e9c49e5fd4e0031100b1c0f97c0042d5

    • SquirrelWaffle is a simple downloader written in C++.

      SquirrelWaffle.

    • Squirrelwaffle Payload

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks