General

  • Target

    22e427d636088505aed35304009c2ac23ae4f39784fa95d0d9d3ca12c71d3834

  • Size

    221KB

  • Sample

    220130-te7k5aedg5

  • MD5

    841480e5194b30eea811a0f9e8c33caf

  • SHA1

    77e0043bfd1556a181f4dc23269e85eaa7858f4a

  • SHA256

    22e427d636088505aed35304009c2ac23ae4f39784fa95d0d9d3ca12c71d3834

  • SHA512

    7669cb2f7da65a3dc1b182b239d734c08b82549473a13f7f4b4b215d38faf8afb5184583cc69143d245547f026982a4152309b9f644f29205dcb8b4a0ef21f82

Malware Config

Extracted

Family

squirrelwaffle

C2

http://pop.vicamtaynam.com/VtyiHAft

http://snsvidyapeeth.in/aXmo2Dr3

http://trinitytesttubebaby.com/QR2JvfE3Sv

http://iconskw.com/cqdPtAbZ

http://ebookchuyennganh.com/v9PMvQDxHK8W

http://alsader.net/BHdQaiQ9rt

http://avyanshglobal.com/6pYjPlqf

http://primahills-online.com/ypCiZn7tMx

http://antoniocastroycia.com.co/WHe08obY

http://apexbiotech.net/VQgunQ4t5Ue

http://vscm.in/V3tYKxDz

http://sinaloworx.co.za/3GilA8Eo3r

http://dancongnghe.xyz/yRByhX6J3REI

http://trajesuniformes.com.br/qQofZMaJm

http://fiorenzapaes.com.br/PGYpETW7

http://astetinternational.com/arW5e44Y7vzO

http://razisystem.ir/MqvvkX0cWvn

http://krishnaiti.org.in/rWA02HQY4

Targets

    • Target

      22e427d636088505aed35304009c2ac23ae4f39784fa95d0d9d3ca12c71d3834

    • Size

      221KB

    • MD5

      841480e5194b30eea811a0f9e8c33caf

    • SHA1

      77e0043bfd1556a181f4dc23269e85eaa7858f4a

    • SHA256

      22e427d636088505aed35304009c2ac23ae4f39784fa95d0d9d3ca12c71d3834

    • SHA512

      7669cb2f7da65a3dc1b182b239d734c08b82549473a13f7f4b4b215d38faf8afb5184583cc69143d245547f026982a4152309b9f644f29205dcb8b4a0ef21f82

    • SquirrelWaffle is a simple downloader written in C++.

      SquirrelWaffle.

    • Squirrelwaffle Payload

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks