Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/10/2026, 14:01
Behavioral task
behavioral1
Sample
2026-10-22_4b897d3e0a2a185e4bb311de5e141a1f_cobalt-strike_mespinoza.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_4b897d3e0a2a185e4bb311de5e141a1f_cobalt-strike_mespinoza.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-10-22_4b897d3e0a2a185e4bb311de5e141a1f_cobalt-strike_mespinoza.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-22_4b897d3e0a2a185e4bb311de5e141a1f_cobalt-strike_mespinoza.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-10-22_4b897d3e0a2a185e4bb311de5e141a1f_cobalt-strike_mespinoza.exe
- Size 820KB
- Sample261024-rb3fwsvtgs
- SHA256 3108d83e6a3de4cfd7c62f5a483cae11f4f6cb776b8c8800d4bccf469f786d5b
- MD5 4b897d3e0a2a185e4bb311de5e141a1f
- SHA1 99bc6c367f17d46c4b2bb137f9e4bb7bd623391b
- SHA512 5ebb89ce6123c490fa490d7bd0e84996ddefa85f689b1b40c94072ce9b840b563d1ce3b0ae7570fbe892f590d7f4b7c2f862ef07574d4e44249d36590c5de330
- SSDEEP 12288:exyTFiV8FgH0852FoeJFXKDZIGNxvoxvod6qluvJs/+BHAacJYK8Yxfm7:esTFiCF6TeTmtNxwxgo9qSAPF8Yxu7
- TLSH T1850523960EC624A1F86589B2F4E61A44B6757A12477665CFC3653A220B3D2D03B3BFCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4156-0-0x00007FF7780C0000-0x00007FF778292000-memory.dmp upx