Overview

overview

10

Static

static

10

Waluigi Logger.exe

windows7-x64

10

Waluigi Logger.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Waluigi Logger.exe

  • Size

    502KB

  • MD5

    5726d7c419228179db24f5b66ce74e71

  • SHA1

    f5347b011624703da479abdf3278646b7e2f7221

  • SHA256

    211766e2790369c501fdd1976efd8391a9e2e1f49b55d98cd3eb0c5a6f71006f

  • SHA512

    34a257c0150f6d4093facedd8c9d8244f0e83ed0916750010814cc72df360c08b2f720184f75103004b75b3182bcf21fb3e37deca591cf4a01078fa56a748231

  • SSDEEP

    6144:ZTEgdc0YiX7IxUpGREWFnhSmEyhVO5Etq4V+yw4uUcEmOb8F96mYcTR36:ZTEgdfYbxU0hS6P44Iywg2pwcd6

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.4.0

Botnet

Office04

C2

192.168.56.1:4782

Mutex

77d2c2ba-22ec-4cd9-8230-0632eea9130b

Attributes
  • encryption_key

    1E0C8192ECB89034206627E6C9DFB8532B11DF7B

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Testbot101

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs

Files

  • Waluigi Logger.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections