Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
18/10/2026, 15:00
Behavioral task
behavioral1
Sample
2026-10-18_4a378bda51a3c1aaa14fd50d6bafc461_cobalt-strike_mespinoza.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-18_4a378bda51a3c1aaa14fd50d6bafc461_cobalt-strike_mespinoza.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-10-18_4a378bda51a3c1aaa14fd50d6bafc461_cobalt-strike_mespinoza.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-18_4a378bda51a3c1aaa14fd50d6bafc461_cobalt-strike_mespinoza.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-10-18_4a378bda51a3c1aaa14fd50d6bafc461_cobalt-strike_mespinoza.exe
- Size 820KB
- Sample261018-sdmznaes2l
- SHA256 88ef95b0b2479b02d2f09b4e342dc49ab24abf0e899318b4ebf176c48a3bd0da
- MD5 4a378bda51a3c1aaa14fd50d6bafc461
- SHA1 30690373f272aaf4d19bba8358a82fcdd65a2174
- SHA512 421a41a4c208e451534a22ca05f74d4f8d05a522a0459b23a64a80527fe0d51d3d7bc10b2ceffa919fad5f349bd0118ba085bade10ae0f7ede94e62343a98766
- SSDEEP 12288:MxMTFrML9slmXvkCmGdFSFNqPasGBkNgzA0D4NXkNx8YeP4EXMZrKdfyhyHHBZ5P:MSTFPlsTTEYP/GEgzA0HN+VPN8kNB
- TLSH T1B20523A35D2210EACD51C5BAB8D65704C3B5B8064B363ACF6B513A792B053F42B3E7B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3936-0-0x00007FF798A80000-0x00007FF798C52000-memory.dmp upx behavioral2/memory/3936-1-0x00007FF798A80000-0x00007FF798C52000-memory.dmp upx