General

  • Target

    0e06c1bce2b49a11964e25346fc07332120ebe7038a3a72435ab241ad8147a0a

  • Size

    325KB

  • Sample

    220130-tzytqafbb5

  • MD5

    16180fed991e26365d502214f9535cec

  • SHA1

    63271433d8f5ff3fc8d2ab6e29362dcd01289def

  • SHA256

    0e06c1bce2b49a11964e25346fc07332120ebe7038a3a72435ab241ad8147a0a

  • SHA512

    0b4ab25ad9f383346ed2498ff87d3de5971a949db396818411e9a31734289c4e294c5837dfbc6db939b75f1616b40662c7bd8f9685e03dd1ee4128d7fac1c0a4

Malware Config

Extracted

Family

squirrelwaffle

C2

http://atertreat.in/5iPPVRKPPX9

http://incentivaconsultores.com.co/55jHpKCc9DWy

http://cdelean.org/0qvbbmu9g

http://bazy.ps/M6SjrMSYC

http://sukmabali.com/ZXxcLYs3rzRQ

http://bugwilliam.tk/cbB56YrugdbW

http://bestbeatsgh.com/42D7OwuPen

http://krumaila.com/UZ4NdDoDh4Tu

http://razehub.com/NN70nExbtLO

http://arcb.ro/aHUUNxE3Me5

http://cfmi.tg/m40YS6gDO0

http://sweetlittle.mx/ZCXP0dT2h

http://alkimia-prod.com/nT0imyzmo

http://almexperts.co.za/fEoJ3pdWZbF

Targets

    • Target

      0e06c1bce2b49a11964e25346fc07332120ebe7038a3a72435ab241ad8147a0a

    • Size

      325KB

    • MD5

      16180fed991e26365d502214f9535cec

    • SHA1

      63271433d8f5ff3fc8d2ab6e29362dcd01289def

    • SHA256

      0e06c1bce2b49a11964e25346fc07332120ebe7038a3a72435ab241ad8147a0a

    • SHA512

      0b4ab25ad9f383346ed2498ff87d3de5971a949db396818411e9a31734289c4e294c5837dfbc6db939b75f1616b40662c7bd8f9685e03dd1ee4128d7fac1c0a4

    • SquirrelWaffle is a simple downloader written in C++.

      SquirrelWaffle.

    • Squirrelwaffle Payload

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks