2026-07-31_c30eb819980e117e8d9f242fddf3b285_akira_cobalt-strike_elex_mespinoza

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-31_c30eb819980e117e8d9f242fddf3b285_akira_cobalt-strike_elex_mespinoza
Size 498KB
Sample260731-29c9rssgle
SHA256 46cb7b8a878d39ed75e39124bfeb4a9efdd40813ed1aad7bf6ca27e6481c6743
MD5 c30eb819980e117e8d9f242fddf3b285
SHA1 868bedffb5df476a89294966ae813b724164ace7
SHA512 f1e7cabfabd6128f8946885105cfd1cd6dc30b637b8627f8b2ad137cbc67e7d8279c225ac6288adf921ac174f2441876e105af3350ffba535977a819a8c9ceb1
SSDEEP 12288:9mY4dCTf8ZROy1xgrd/DrwHz4cI48XCjZuT5brHT:1GCSIt1WZuTRL
TLSH
T194B43B027701D0B6C28251B5D71EE77A973A4E882F114DD7E6E0BEAB79F86C23C31598
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-31_c30eb819980e117e8d9f242fddf3b285_akira_cobalt-strike_elex_mespinoza

File Explorer

2026-07-31_c30eb819980e117e8d9f242fddf3b285_akira_cobalt-strike_elex_mespinoza

.exe 498KB

2026-07-31_c30eb819980e117e8d9f242fddf3b285_akira_cobalt-strike_elex_mespinoza

IMPHASH d1fd04dabd9c32cf00c5d31dc7390cc0
SHA256 46cb7b8a878d39ed75e39124bfeb4a9efdd40813ed1aad7bf6ca27e6481c6743
MD5 c30eb819980e117e8d9f242fddf3b285
SHA1 868bedffb5df476a89294966ae813b724164ace7
SHA512 f1e7cabfabd6128f8946885105cfd1cd6dc30b637b8627f8b2ad137cbc67e7d8279c225ac6288adf921ac174f2441876e105af3350ffba535977a819a8c9ceb1
SSDEEP 12288:9mY4dCTf8ZROy1xgrd/DrwHz4cI48XCjZuT5brHT:1GCSIt1WZuTRL
TLSH
T194B43B027701D0B6C28251B5D71EE77A973A4E882F114DD7E6E0BEAB79F86C23C31598
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

292574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AreFileApisANSI CloseHandle CreateEventW CreateFileA CreateFileW DeleteCriticalSection EnterCriticalSection FindClose FindFirstFileW FormatMessageA FreeLibrary GetConsoleScreenBufferInfo GetConsoleWindow GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDynamicTimeZoneInformation GetFileAttributesA GetFileAttributesExW GetFileInformationByHandleEx GetFinalPathNameByHandleW GetLastError GetLocalTime GetLocaleInfoEx GetModuleFileNameA GetModuleHandleW GetProcAddress GetStdHandle GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryA LocalFree MultiByteToWideChar PeekConsoleInputA QueryPerformanceCounter ReadConsoleInputA ResetEvent SetConsoleOutputCP SetEvent SetUnhandledExceptionFilter Sleep TerminateProcess UnhandledExceptionFilter WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW lstrcpyA

ws2_32

WSACleanup WSAStartup

msvcp140

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ??0_Locinfo@std@@QAE@PBD@Z ??0_Lockit@std@@QAE@H@Z ??0facet@locale@std@@IAE@I@Z ??0ios_base@std@@IAE@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ??1_Locinfo@std@@QAE@XZ ??1_Lockit@std@@QAE@XZ ??1facet@locale@std@@MAE@XZ ??1ios_base@std@@UAE@XZ ?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?_Id_cnt@id@locale@std@@0HA ?_Incref@facet@locale@std@@UAEXXZ ?_Init@locale@std@@CAPAV_Locimp@12@_N@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?_Syserror_map@std@@YAPBDH@Z ?_Throw_C_error@std@@YAXH@Z ?_Throw_Cpp_error@std@@YAXH@Z ?_Winerror_map@std@@YAHH@Z ?_Xbad_alloc@std@@YAXXZ ?_Xbad_function_call@std@@YAXXZ ?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z ?__ExceptionPtrAssign@@YAXPAXPBX@Z ?__ExceptionPtrCopy@@YAXPAXPBX@Z ?__ExceptionPtrCopyException@@YAXPAXPBX1@Z ?__ExceptionPtrCreate@@YAXPAX@Z ?__ExceptionPtrCurrentException@@YAXPAX@Z ?__ExceptionPtrDestroy@@YAXPAX@Z ?__ExceptionPtrRethrow@@YAXPBX@Z ?__ExceptionPtrToBool@@YA_NPBX@Z ?bad@ios_base@std@@QBE_NXZ ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?fail@ios_base@std@@QBE_NXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ?good@ios_base@std@@QBE_NXZ ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?id@?$numpunct@D@std@@2V0locale@2@A ?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ ?uncaught_exception@std@@YA_NXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z _Cnd_broadcast _Cnd_destroy_in_situ _Cnd_do_broadcast_at_thread_exit _Cnd_init_in_situ _Cnd_register_at_thread_exit _Cnd_signal _Cnd_unregister_at_thread_exit _Cnd_wait _Mtx_destroy_in_situ _Mtx_init_in_situ _Mtx_lock _Mtx_unlock _Query_perf_counter _Query_perf_frequency _Thrd_id _Thrd_join _Thrd_sleep _Thrd_yield _Xtime_get_ticks

gdi32

CreateFontIndirectA DeleteObject SelectObject SetBkColor SetTextColor TextOutA

user32

GetDC InvalidateRect ReleaseDC

vcruntime140

_CxxThrowException __CxxFrameHandler3 __current_exception __current_exception_context __std_exception_copy __std_exception_destroy __std_terminate _except_handler4_common _purecall memchr memcmp memcpy memmove memset

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _beginthreadex _c_exit _cexit _configure_narrow_argv _controlfp_s _crt_at_quick_exit _crt_atexit _errno _exit _get_initial_narrow_environment _getpid _initialize_narrow_environment _initialize_onexit_table _initterm _initterm_e _invalid_parameter_noinfo_noreturn _register_onexit_function _register_thread_local_exe_atexit_callback _seh_filter_exe _set_app_type abort exit signal terminate

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __stdio_common_vfprintf _fileno _fseeki64 _fsopen _get_osfhandle _get_stream_buffer_pointers _isatty _set_fmode fclose fflush fgetc fgetpos fputc fread fsetpos fwrite setvbuf ungetc

api-ms-win-crt-math-l1-1-0

__setusermatherr _dsign _dtest _fdtest _ldtest exp

api-ms-win-crt-heap-l1-1-0

_callnewh _set_new_mode calloc free malloc

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func _configthreadlocale localeconv setlocale

api-ms-win-crt-time-l1-1-0

_gmtime64_s _localtime64_s

api-ms-win-crt-filesystem-l1-1-0

_lock_file _mkdir _unlock_file

api-ms-win-crt-string-l1-1-0

isprint isspace strlen tolower

Name

.text

Size

283KB

Virtual Size

282KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

32KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

169KB

Virtual Size

168KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-31_c30eb819980e117e8d9f242fddf3b285_akira_cobalt-strike_elex_mespinoza

kernel32

ws2_32

msvcp140

gdi32

user32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-string-l1-1-0

generic