General
- Target 2026-07-14_09ada231220439a282351b3453216a57_cobalt-strike_mespinoza_njrat_stealc
- Size 349KB
- Sample260714-e7874agw7x
- SHA256 bffd4fd2bc97094b3180810a05eb33c94b65d794969c5e9cac8f55baba688cc1
- MD5 09ada231220439a282351b3453216a57
- SHA1 47034d4d00f785d90a7931e2f4b1128ff0c0217a
- SHA512 5f7a714c933ad5f5a888333ba558a0d546bc2915a181a4cbce9008cbaa0957f3f280ff3414624813f75fa2fb8926b823b75f9e46b4afb212e65fa02452c495c7
- SSDEEP 6144:kD8sIJR/AAW6XHljf7eQX8WiJdPS6u+SwVl8Ag:kD8l3/AAW6XHhf7exJdPpu+SR
- TLSH T11C745B5CC72148F6D43BA2B0C0B81641BAB57CA84B907A9736E8CA355F725D0BF7E361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_09ada231220439a282351b3453216a57_cobalt-strike_mespinoza_njrat_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_09ada231220439a282351b3453216a57_cobalt-strike_mespinoza_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_09ada231220439a282351b3453216a57_cobalt-strike_mespinoza_njrat_stealc
- Size 349KB
- SHA256 bffd4fd2bc97094b3180810a05eb33c94b65d794969c5e9cac8f55baba688cc1
- MD5 09ada231220439a282351b3453216a57
- SHA1 47034d4d00f785d90a7931e2f4b1128ff0c0217a
- SHA512 5f7a714c933ad5f5a888333ba558a0d546bc2915a181a4cbce9008cbaa0957f3f280ff3414624813f75fa2fb8926b823b75f9e46b4afb212e65fa02452c495c7
- SSDEEP 6144:kD8sIJR/AAW6XHljf7eQX8WiJdPS6u+SwVl8Ag:kD8l3/AAW6XHhf7exJdPpu+SR
- TLSH T11C745B5CC72148F6D43BA2B0C0B81641BAB57CA84B907A9736E8CA355F725D0BF7E361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.