Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/10/2026, 22:49
Behavioral task
behavioral1
Sample
2026-10-21_6b052d54a48b59681e6a36aff84c1239_cobalt-strike_mespinoza.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-21_6b052d54a48b59681e6a36aff84c1239_cobalt-strike_mespinoza.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-10-21_6b052d54a48b59681e6a36aff84c1239_cobalt-strike_mespinoza.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-21_6b052d54a48b59681e6a36aff84c1239_cobalt-strike_mespinoza.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-10-21_6b052d54a48b59681e6a36aff84c1239_cobalt-strike_mespinoza.exe
- Size 819KB
- Sample261022-2rnyjsvtfs
- SHA256 33847c402e7e9b56e442a3fc45a97700ce3c3d2a4b16b1e2fb06888507325543
- MD5 6b052d54a48b59681e6a36aff84c1239
- SHA1 02fa186b943c6675d8f785457ba19ac7d8526452
- SHA512 c83575ca5be1ba527e52eef643e1604c3e2af37f0ae0a68aa493c4a0991580032baf36052b91cd4287fa88dbd0631a5eafd77d4de22d09efdaee8bd95c9feb7c
- SSDEEP 24576:8UTFEyUDPXDOV4noE9aRyabR7RAGQjzwujta:xTYPSV4oE9xabtRAVxa
- TLSH T16A05235791D271BAD491C2F8E1C9D173D1E2B8048F2A38FFA3C55E342B05994EB36B68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2800-0-0x00007FF728F00000-0x00007FF728FFF000-memory.dmp upx