General

  • Target

    18118ae2e8512b453e445bb42be2c5cd8d375ae5f2d8a1c353a340777f1c44ed

  • Size

    319KB

  • Sample

    220130-tn7mgsegd4

  • MD5

    12ae4651b0976c12e65f2183a2aecba9

  • SHA1

    f9a55bde96072a7fc071b0b6b2c4d3acacbf0f24

  • SHA256

    18118ae2e8512b453e445bb42be2c5cd8d375ae5f2d8a1c353a340777f1c44ed

  • SHA512

    7ff2953be31853f312e1d1e1419726aeb02abd798af3cbc99387520231558fa2a02920db3b2c2adf67d65ff0cae4dca46c9032d4ff982ed0b1c46ec5d5964efa

Malware Config

Extracted

Family

squirrelwaffle

C2

http://atertreat.in/5iPPVRKPPX9

http://incentivaconsultores.com.co/55jHpKCc9DWy

http://cdelean.org/0qvbbmu9g

http://bazy.ps/M6SjrMSYC

http://sukmabali.com/ZXxcLYs3rzRQ

http://bugwilliam.tk/cbB56YrugdbW

http://bestbeatsgh.com/42D7OwuPen

http://krumaila.com/UZ4NdDoDh4Tu

http://razehub.com/NN70nExbtLO

http://arcb.ro/aHUUNxE3Me5

http://cfmi.tg/m40YS6gDO0

http://sweetlittle.mx/ZCXP0dT2h

http://alkimia-prod.com/nT0imyzmo

http://almexperts.co.za/fEoJ3pdWZbF

Targets

    • Target

      18118ae2e8512b453e445bb42be2c5cd8d375ae5f2d8a1c353a340777f1c44ed

    • Size

      319KB

    • MD5

      12ae4651b0976c12e65f2183a2aecba9

    • SHA1

      f9a55bde96072a7fc071b0b6b2c4d3acacbf0f24

    • SHA256

      18118ae2e8512b453e445bb42be2c5cd8d375ae5f2d8a1c353a340777f1c44ed

    • SHA512

      7ff2953be31853f312e1d1e1419726aeb02abd798af3cbc99387520231558fa2a02920db3b2c2adf67d65ff0cae4dca46c9032d4ff982ed0b1c46ec5d5964efa

    • SquirrelWaffle is a simple downloader written in C++.

      SquirrelWaffle.

    • Squirrelwaffle Payload

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks