General
- Target 2026-07-03_8fc8df12f2bc6269caa557c8f92c3bb8_cobalt-strike_mespinoza
- Size 297KB
- Sample260703-tadr9act3v
- SHA256 59e7259bb8fd08b8d2c845e8c66449d36266db172e216e69b37df4951a787da6
- MD5 8fc8df12f2bc6269caa557c8f92c3bb8
- SHA1 c7cc5ff214de39d07c1fac28ea6ef11c31b5132f
- SHA512 30c2c22db4ff20dddee77578acf665274076524d699144ce1c295eec2fcc829520f61e5b2691b3737a5d4d182b1b18d7c8d44751a47e5bf6ec36f082c3d377ce
- SSDEEP 6144:vLsbFERcyMX/+FQBV+zCNe88s9yIwn9ATuZWyI4stR:yFXibs9DloWBDR
- TLSH T11E547C53A51920FAD99BC07962835421FA717C490B30B8DF52C47F36AE687D0AF39F86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_8fc8df12f2bc6269caa557c8f92c3bb8_cobalt-strike_mespinoza.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_8fc8df12f2bc6269caa557c8f92c3bb8_cobalt-strike_mespinoza.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_8fc8df12f2bc6269caa557c8f92c3bb8_cobalt-strike_mespinoza
- Size 297KB
- SHA256 59e7259bb8fd08b8d2c845e8c66449d36266db172e216e69b37df4951a787da6
- MD5 8fc8df12f2bc6269caa557c8f92c3bb8
- SHA1 c7cc5ff214de39d07c1fac28ea6ef11c31b5132f
- SHA512 30c2c22db4ff20dddee77578acf665274076524d699144ce1c295eec2fcc829520f61e5b2691b3737a5d4d182b1b18d7c8d44751a47e5bf6ec36f082c3d377ce
- SSDEEP 6144:vLsbFERcyMX/+FQBV+zCNe88s9yIwn9ATuZWyI4stR:yFXibs9DloWBDR
- TLSH T11E547C53A51920FAD99BC07962835421FA717C490B30B8DF52C47F36AE687D0AF39F86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.