General

  • Target

    221a2953b14095e0906bad6c1c7e39362278035c13be6c8b5a025c1cf128f28f

  • Size

    333KB

  • Sample

    220130-tfeazaedg7

  • MD5

    737195d3ce34117555860d83ffc160b9

  • SHA1

    bc230609bd3fa6b52481acfc45a69697ed08add2

  • SHA256

    221a2953b14095e0906bad6c1c7e39362278035c13be6c8b5a025c1cf128f28f

  • SHA512

    f12a6c35d2abdf0f8cde737bece2a82ad4cab575d776ca99c1e3d8983158c486638e47de7af4491d7343dfb02a014a35c2b812ac56601717f20f1a813e2a5cc4

Malware Config

Extracted

Family

squirrelwaffle

C2

http://atertreat.in/5iPPVRKPPX9

http://incentivaconsultores.com.co/55jHpKCc9DWy

http://cdelean.org/0qvbbmu9g

http://bazy.ps/M6SjrMSYC

http://sukmabali.com/ZXxcLYs3rzRQ

http://bugwilliam.tk/cbB56YrugdbW

http://bestbeatsgh.com/42D7OwuPen

http://krumaila.com/UZ4NdDoDh4Tu

http://razehub.com/NN70nExbtLO

http://arcb.ro/aHUUNxE3Me5

http://cfmi.tg/m40YS6gDO0

http://sweetlittle.mx/ZCXP0dT2h

http://alkimia-prod.com/nT0imyzmo

http://almexperts.co.za/fEoJ3pdWZbF

Targets

    • Target

      221a2953b14095e0906bad6c1c7e39362278035c13be6c8b5a025c1cf128f28f

    • Size

      333KB

    • MD5

      737195d3ce34117555860d83ffc160b9

    • SHA1

      bc230609bd3fa6b52481acfc45a69697ed08add2

    • SHA256

      221a2953b14095e0906bad6c1c7e39362278035c13be6c8b5a025c1cf128f28f

    • SHA512

      f12a6c35d2abdf0f8cde737bece2a82ad4cab575d776ca99c1e3d8983158c486638e47de7af4491d7343dfb02a014a35c2b812ac56601717f20f1a813e2a5cc4

    • SquirrelWaffle is a simple downloader written in C++.

      SquirrelWaffle.

    • Squirrelwaffle Payload

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks