内容仅以原始语言提供
class="post-article">

Squirrelwaffle

Squirrelwaffle 2021 email thread hijacking loader. Exchange ProxyLogon/ProxyShell. Qakbot+CS dropper.

威胁档案
类型 Loader
编程语言C++
C2协议HTTPS
首次发现2021
目标 Kurumsal
用途 / 能力
  • Loader
尚未发现该家族的 C2 服务器。

研究报告 (2)

Yüksek

Squirrelwaffle -- 541KB E-posta Thread Hijacking Loader, IsDebuggerPresent | Yüksek

Squirrelwaffle 541KB e-posta thread hijacking loader. IsDebuggerPresent. Qakbot+Cobalt Strike dropper. 2021.

阅读报告 →
Yüksek

Squirrelwaffle -- test1.test.dll 458KB Loader, Şifreli C2 Config | Yüksek

Squirrelwaffle test1.test.dll 458KB loader. Şifreli C2 config fragmentleri. Qakbot/Cobalt Strike dropper.

阅读报告 →