General
- Target 2026-07-07_1f7766f54e1ae0c2bf9638cb11214151_cobalt-strike_mespinoza
- Size 297KB
- Sample260707-w5qfmsct51
- SHA256 9a118dad512c44bab74ab7f091bef82a3ae6691849c41b25f06f4cb37d58a79c
- MD5 1f7766f54e1ae0c2bf9638cb11214151
- SHA1 7416203d25ca4e3cc213d0d38a1f5b158d2550e6
- SHA512 c9023e23b23270541ae2076881671e0ac3623537d4ddd9b23a89bafee7d93322e49f072885f97749669c7b228db93aa349283e5e2007515cc475858a30b5a65d
- SSDEEP 6144:sxskyJc6z9JHWovh2ujkR8Ts9pIwn9ATuZvKOEWql7g2Toq1l3QqsZ:qyjmgs9OloyOEWY7g2UkdQJZ
- TLSH T15A547D53A15960BED98BC0B9A6839421FA727C490734B4CF62D47F326E687E06F38F45
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_1f7766f54e1ae0c2bf9638cb11214151_cobalt-strike_mespinoza.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_1f7766f54e1ae0c2bf9638cb11214151_cobalt-strike_mespinoza.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_1f7766f54e1ae0c2bf9638cb11214151_cobalt-strike_mespinoza
- Size 297KB
- SHA256 9a118dad512c44bab74ab7f091bef82a3ae6691849c41b25f06f4cb37d58a79c
- MD5 1f7766f54e1ae0c2bf9638cb11214151
- SHA1 7416203d25ca4e3cc213d0d38a1f5b158d2550e6
- SHA512 c9023e23b23270541ae2076881671e0ac3623537d4ddd9b23a89bafee7d93322e49f072885f97749669c7b228db93aa349283e5e2007515cc475858a30b5a65d
- SSDEEP 6144:sxskyJc6z9JHWovh2ujkR8Ts9pIwn9ATuZvKOEWql7g2Toq1l3QqsZ:qyjmgs9OloyOEWY7g2UkdQJZ
- TLSH T15A547D53A15960BED98BC0B9A6839421FA727C490734B4CF62D47F326E687E06F38F45
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.