General
- Target 2026-07-08_4d847dcd1d9458ca2a4fc6110f3c7b21_cobalt-strike_mespinoza
- Size 297KB
- Sample260708-wlpd8sd12j
- SHA256 e5950141d60aa0f974793cd63820920fdedb99aa3142ad8febc7c9260ac74423
- MD5 4d847dcd1d9458ca2a4fc6110f3c7b21
- SHA1 d35a0415996de3dc265d017a0a18c62716b27731
- SHA512 6d337fd3a508c865bf23eab7255dc3acaa264260ad8686f0931a352687f80e3ef59bfd7e5ba835c97747c5e92e07a871d1a4caaf4bc943c10c04513a96e7dc1c
- SSDEEP 6144:aIsSZLDMZGtnOmf/GvqoaL8Ts9bIwn9ATuZcxOTCztS4:7ZVjks9clocBz04
- TLSH T192548C53A22860BAD88BC0B966839525F9717C490734B4CF62D47F326E687E06F3DF85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_4d847dcd1d9458ca2a4fc6110f3c7b21_cobalt-strike_mespinoza.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_4d847dcd1d9458ca2a4fc6110f3c7b21_cobalt-strike_mespinoza.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_4d847dcd1d9458ca2a4fc6110f3c7b21_cobalt-strike_mespinoza
- Size 297KB
- SHA256 e5950141d60aa0f974793cd63820920fdedb99aa3142ad8febc7c9260ac74423
- MD5 4d847dcd1d9458ca2a4fc6110f3c7b21
- SHA1 d35a0415996de3dc265d017a0a18c62716b27731
- SHA512 6d337fd3a508c865bf23eab7255dc3acaa264260ad8686f0931a352687f80e3ef59bfd7e5ba835c97747c5e92e07a871d1a4caaf4bc943c10c04513a96e7dc1c
- SSDEEP 6144:aIsSZLDMZGtnOmf/GvqoaL8Ts9bIwn9ATuZcxOTCztS4:7ZVjks9clocBz04
- TLSH T192548C53A22860BAD88BC0B966839525F9717C490734B4CF62D47F326E687E06F3DF85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.