General

  • Target

    15409d59f55d2ae6f30b8e2257bccb246b75a1b044166b31433e55c02d64d158

  • Size

    447KB

  • Sample

    220130-trrqfaeabq

  • MD5

    9dc52d895766be6eba8184c4edfc544f

  • SHA1

    388aeb6d1e19376d8f1e155e53d7fe6a910dc6dc

  • SHA256

    15409d59f55d2ae6f30b8e2257bccb246b75a1b044166b31433e55c02d64d158

  • SHA512

    5bcea52afa0401fb98e7d18930e04ee4410ac0d5f7883a5f6de99207931adc83c4c40c41891ed79d03a24e8f0288846af508e549732aeb889f0e030fd1b3829b

Malware Config

Extracted

Family

squirrelwaffle

C2

http://deanandwilconstruction.com/UXEvfuIlhws

http://arimeto.lv/Nm70oAfwB

http://gitamschool.com/oZbs0Oqw7uv

http://eresourcesmoneymarket.com/JbVwdgaV6l

http://flyershipmanager.com/SGAsORYsywt

Attributes
  • blocklist

    94.46.179.80

    206.189.205.251

    88.242.66.45

    85.75.110.214

    87.104.3.136

    207.244.91.171

    49.230.88.160

    91.149.252.75

    91.149.252.88

    92.211.109.152

    178.0.250.168

    88.69.16.230

    95.223.77.160

    99.234.62.23

    2.206.105.223

    84.222.8.201

    89.183.239.142

    5.146.132.101

    77.7.60.154

    45.41.106.122

    45.74.72.13

    74.58.152.123

    88.87.68.197

    109.70.100.25

    185.67.82.114

    207.102.138.19

    204.101.161.14

    193.128.108.251

    111.7.100.17

    111.7.100.16

Targets

    • Target

      15409d59f55d2ae6f30b8e2257bccb246b75a1b044166b31433e55c02d64d158

    • Size

      447KB

    • MD5

      9dc52d895766be6eba8184c4edfc544f

    • SHA1

      388aeb6d1e19376d8f1e155e53d7fe6a910dc6dc

    • SHA256

      15409d59f55d2ae6f30b8e2257bccb246b75a1b044166b31433e55c02d64d158

    • SHA512

      5bcea52afa0401fb98e7d18930e04ee4410ac0d5f7883a5f6de99207931adc83c4c40c41891ed79d03a24e8f0288846af508e549732aeb889f0e030fd1b3829b

MITRE ATT&CK Matrix

Tasks