Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/10/2026, 18:24
Behavioral task
behavioral1
Sample
2026-10-22_d63cfa8296d7f02f233209ce8dea0ba1_cobalt-strike_mespinoza.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_d63cfa8296d7f02f233209ce8dea0ba1_cobalt-strike_mespinoza.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-10-22_d63cfa8296d7f02f233209ce8dea0ba1_cobalt-strike_mespinoza.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-22_d63cfa8296d7f02f233209ce8dea0ba1_cobalt-strike_mespinoza.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-10-22_d63cfa8296d7f02f233209ce8dea0ba1_cobalt-strike_mespinoza.exe
- Size 820KB
- Sample261023-w15prsc17x
- SHA256 988ac61f0504f96a3eaf0aff440d175fe29f1b032d1acb9b36a0c0b1a26a873f
- MD5 d63cfa8296d7f02f233209ce8dea0ba1
- SHA1 e808d77d570e490a944b16ee95f72ab438e1952a
- SHA512 ef4457c581e1a20270e28907df01e2cd2b5765111209e4b956f17c4060d3e47e893ac73ca2ab000d38f15c54ce38c4b37dcb38e5a88b1925abf7b2affb4098d7
- SSDEEP 24576:MSTFdlPRae8xNYbr1Q34Lfml+gFlfl6n:PTPlPP8xNYX1QAOlx
- TLSH T19E0523621E5420D7C079C3F0D6EA63118574BC090FB82BDF65E9BA211A5BBD05F79B38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/5124-0-0x00007FF6D9250000-0x00007FF6D9422000-memory.dmp upx behavioral2/memory/5124-1-0x00007FF6D9250000-0x00007FF6D9422000-memory.dmp upx