Analysis
- max time kernel
0s - max time network
3s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/10/2026, 14:47
Behavioral task
behavioral1
Sample
2026-10-22_4560926eb5cd05534099c6152830711a_cobalt-strike_mespinoza.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_4560926eb5cd05534099c6152830711a_cobalt-strike_mespinoza.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-10-22_4560926eb5cd05534099c6152830711a_cobalt-strike_mespinoza.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-22_4560926eb5cd05534099c6152830711a_cobalt-strike_mespinoza.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-10-22_4560926eb5cd05534099c6152830711a_cobalt-strike_mespinoza.exe
- Size 824KB
- Sample261024-r6bxesav6t
- SHA256 b92516ccf32acc66374d9017e112362ec05ca27a949daee09c6130a9c87b252a
- MD5 4560926eb5cd05534099c6152830711a
- SHA1 eb4b747d3f2a84852fc1ff935323d82e519ce320
- SHA512 7ddbfa53b5775d0c62f4985a70fccec2aeb26c8798be1a08eda0dda36f4540b44c06ff480a67ad4d8803c3ed7423d4eaa8f80e092e7b88657b07abb8921c0d05
- SSDEEP 24576:ecTFk5rs8Nhvg1mP2Ihx8HGphiMwzv2Kh:rTy5rdNhCo8GxwzXh
- TLSH T1DB052317A68914E7D614D6B5B9E32761D370F7053B2EDCCB4A98EA302F0C5D22A3BB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1192-0-0x00007FF753D80000-0x00007FF753F54000-memory.dmp upx