Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/10/2026, 16:26
Behavioral task
behavioral1
Sample
2026-10-22_38fc927364c1b03bc1927c349069f822_cobalt-strike_mespinoza.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_38fc927364c1b03bc1927c349069f822_cobalt-strike_mespinoza.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-10-22_38fc927364c1b03bc1927c349069f822_cobalt-strike_mespinoza.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-22_38fc927364c1b03bc1927c349069f822_cobalt-strike_mespinoza.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-10-22_38fc927364c1b03bc1927c349069f822_cobalt-strike_mespinoza.exe
- Size 824KB
- Sample261024-txhdysvyex
- SHA256 a8ddaa34362071d98c809635828382f8b9d0607d65ba64281b68aa20494b3c81
- MD5 38fc927364c1b03bc1927c349069f822
- SHA1 95b85c37390c179f3443240892aa589574054e2b
- SHA512 2584d3c488c9fcb3e73f99fd8e025505f8afcc42e01c369d3a6da43850aecae46eeac866db71c659d429989ffaf21fc01cb69e2ebdae80339aa7321830d8c410
- SSDEEP 12288:gZKTF+AlFfZbKurHVAlIp4UWR/JuwaH4RLKh24gvcIGOFh/ZsQzjL//mgBOa:gETF+uHa9LZ4sEOX/ZsW/mgB
- TLSH T1630523070F9140F1E1929378E8D249B6A3B1B8260F705DDFC3D0A3A61F946E59B7A7B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3916-0-0x00007FF71D680000-0x00007FF71D780000-memory.dmp upx