Analysis
- max time kernel
0s - max time network
3s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/10/2026, 20:14
Behavioral task
behavioral1
Sample
2026-10-22_cce2a69a212e60debf36dd8311a9d639_cobalt-strike_mespinoza.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_cce2a69a212e60debf36dd8311a9d639_cobalt-strike_mespinoza.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-10-22_cce2a69a212e60debf36dd8311a9d639_cobalt-strike_mespinoza.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-22_cce2a69a212e60debf36dd8311a9d639_cobalt-strike_mespinoza.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-10-22_cce2a69a212e60debf36dd8311a9d639_cobalt-strike_mespinoza.exe
- Size 820KB
- Sample261023-y1dbmade68
- SHA256 03a992b9d4e86bd4b4cca3b8ceeef40ed45bad168958e4531e9a6562a0178598
- MD5 cce2a69a212e60debf36dd8311a9d639
- SHA1 80e33e69e04f27c07770374f173f7d26d0c20c53
- SHA512 48ce5fc2a084380d4c6d7954426061bfb576fe0bfa937b1b8fff9fe1eb43f7e0bfe386e71ad92a465782aa26f2bd1bb13faded4f07e603f8af7577e6183e48e2
- SSDEEP 24576:MSTFKKaKngL2jdshRTdG1YxITqvfPkbIcbjL:PTRarSj8RoTCC
- TLSH T15C05236BDFC246E0C42557B479E7AA0879B27A4C4B1F49CFC6E06B681F1A7D02B3C950
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3316-0-0x00007FF69E090000-0x00007FF69E262000-memory.dmp upx behavioral2/memory/3316-1-0x00007FF69E090000-0x00007FF69E262000-memory.dmp upx