General
- Target 2026-07-06_006320eab1ee3f4733531839d5c22671_cobalt-strike_mespinoza
- Size 297KB
- Sample260707-gjs73saz8s
- SHA256 32cd706f7e493edca737f3b4d8982ff636a8f69cfc3c4b99d0c54e1ec01a7ffd
- MD5 006320eab1ee3f4733531839d5c22671
- SHA1 c078f42139acb6807073accafa25194db23a63cc
- SHA512 7bd74985ea20837c537365cf67399b2ce133de8d6e735e4c926603e5696b07ad4d7ab2d60c1139bcb93f5a981faaba4c519fc9516955baedc706e4fd3bf75b45
- SSDEEP 6144:JisIEtjK2rz+q4f17C2GR8Js9VIwn9ATuZ5BGSnB5r3:2Eg46s9qlojG8b
- TLSH T15C546B43921920BAD89BC0B866C35421FA717C494734B8DF52C47F366E69BE0AF39F85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_006320eab1ee3f4733531839d5c22671_cobalt-strike_mespinoza.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_006320eab1ee3f4733531839d5c22671_cobalt-strike_mespinoza.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_006320eab1ee3f4733531839d5c22671_cobalt-strike_mespinoza
- Size 297KB
- SHA256 32cd706f7e493edca737f3b4d8982ff636a8f69cfc3c4b99d0c54e1ec01a7ffd
- MD5 006320eab1ee3f4733531839d5c22671
- SHA1 c078f42139acb6807073accafa25194db23a63cc
- SHA512 7bd74985ea20837c537365cf67399b2ce133de8d6e735e4c926603e5696b07ad4d7ab2d60c1139bcb93f5a981faaba4c519fc9516955baedc706e4fd3bf75b45
- SSDEEP 6144:JisIEtjK2rz+q4f17C2GR8Js9VIwn9ATuZ5BGSnB5r3:2Eg46s9qlojG8b
- TLSH T15C546B43921920BAD89BC0B866C35421FA717C494734B8DF52C47F366E69BE0AF39F85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.