Overview

overview

10

Static

static

10

Server.exe

windows10-2004-x64

10

Server.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Server.exe

  • Size

    37KB

  • MD5

    c9220d1644f6f8d3e17d600b55236577

  • SHA1

    dc6b47a034c96bacfeaf0289ae84082312a5f8d7

  • SHA256

    f583a466c9a364be74f50e30d24021a0fa4bd642d7a06e5a4231dcd2bdb73bfb

  • SHA512

    8917155071e47858a2a7422b26a9bc50d0ced293b093c5622c25fbbebb09d80234163e42224d4c91f38a940397701fb982059c955b48ea9083806cbec3d3c1cd

  • SSDEEP

    384:IjrsiDZT95hL5YyUvfVvdOW4CW0jlrAF+rMRTyN/0L+EcoinblneHQM3epzXDNro:QVv5zUvfVL1W+lrM+rMRa8NuVCt

Score
10/10
warpdancermutexnjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

WarpDancerMutex

C2

127.0.0.1:5552

Mutex

c7565400fa3bc08f1df42f13623cb8b4

Attributes
  • reg_key

    c7565400fa3bc08f1df42f13623cb8b4

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Server.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections