Analysis
- max time kernel
0s - max time network
3s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/10/2026, 16:52
Behavioral task
behavioral1
Sample
2026-10-19_6fc12ffaca57c35d0595e49747c09bdb_cobalt-strike_mespinoza.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-19_6fc12ffaca57c35d0595e49747c09bdb_cobalt-strike_mespinoza.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-10-19_6fc12ffaca57c35d0595e49747c09bdb_cobalt-strike_mespinoza.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-19_6fc12ffaca57c35d0595e49747c09bdb_cobalt-strike_mespinoza.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-10-19_6fc12ffaca57c35d0595e49747c09bdb_cobalt-strike_mespinoza.exe
- Size 820KB
- Sample261020-vdc6katx2p
- SHA256 090231e4a2b2c14e0a95cc3bc01d9c7f899e0e4673c8f859af2f6b0449b9aff8
- MD5 6fc12ffaca57c35d0595e49747c09bdb
- SHA1 2cea04344f1cc741359756ef1dece3cd03a8d736
- SHA512 f5ef9f2140145d908b99f75e74289e9e404331738111ea52bafda9823c7326df4542eb39c052aea0af703bf82b743ba5eb6dad63ddc0a9fd2f1fa9490130235c
- SSDEEP 12288:exyTFcUyLvMtKPMyEUhiqxl4y1uimhsMEm9CLX9U6Pmne2zxj83vUfwN:esTFGvM3yReRdqmCAzxj884
- TLSH T138052367DB821066E1709531A2D64B57D671B81E4FFAFECFE25073292B233E02E75188
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4400-0-0x00007FF61BC90000-0x00007FF61BE62000-memory.dmp upx behavioral2/memory/4400-1-0x00007FF61BC90000-0x00007FF61BE62000-memory.dmp upx