Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
18/10/2026, 16:32
Behavioral task
behavioral1
Sample
2026-10-18_29cc2b176fed719bcb9ce6ad8f6afcb2_cobalt-strike_mespinoza.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-18_29cc2b176fed719bcb9ce6ad8f6afcb2_cobalt-strike_mespinoza.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-10-18_29cc2b176fed719bcb9ce6ad8f6afcb2_cobalt-strike_mespinoza.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-18_29cc2b176fed719bcb9ce6ad8f6afcb2_cobalt-strike_mespinoza.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-10-18_29cc2b176fed719bcb9ce6ad8f6afcb2_cobalt-strike_mespinoza.exe
- Size 824KB
- Sample261018-t2bf7sgv71
- SHA256 1238df305a3a9f8b554f323fc2fff6ab678feab13419bbb472c57481dede5db5
- MD5 29cc2b176fed719bcb9ce6ad8f6afcb2
- SHA1 3cece214cd868c67eb5f0828490cf447e0f97824
- SHA512 baa04ee05e9df87b396e9eaacd8797164bade989bbc99c6d8699a6db1c554c55d4a63fd188bdef388434c2a77f1e524f93d1d9e973a5bf833c98c4834c0c80f5
- SSDEEP 12288:exiTFvFIleGeiA/fQEFXHMHm/DN9doMs6zkub4E79eiWaVoCL4pjEo7eq8Ru9:ecTFdIAGjAXTF3PLNiil4E74rQY9e4
- TLSH T1EE052306A40125F3CA65A3F0B9E68101C9A5FC1C4FBEFDCBE345FA311A151D19E7A7A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/5132-0-0x00007FF65EF40000-0x00007FF65F114000-memory.dmp upx