Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
26/10/2026, 14:37
Behavioral task
behavioral1
Sample
2026-10-25_b986c2c66d80f11b695e19af653f0e9e_cobalt-strike_mespinoza.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-25_b986c2c66d80f11b695e19af653f0e9e_cobalt-strike_mespinoza.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-10-25_b986c2c66d80f11b695e19af653f0e9e_cobalt-strike_mespinoza.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-25_b986c2c66d80f11b695e19af653f0e9e_cobalt-strike_mespinoza.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-10-25_b986c2c66d80f11b695e19af653f0e9e_cobalt-strike_mespinoza.exe
- Size 819KB
- Sample261026-ry4mgafv8n
- SHA256 2e6bce915cb5de844e034504314ea3e82dabe21dbb365115e4287df38b8b7221
- MD5 b986c2c66d80f11b695e19af653f0e9e
- SHA1 8771fc5651f37c120a8854d9d83efb24eeb2812c
- SHA512 0aa50cd266255164ddfefbc9370b84e490f93bc6e97d1018a7b4548b1342e489025e752dcaca2a9f0997515224f4a355fd907b0ba7179ad23485a2c606599d9c
- SSDEEP 24576:VFTFP68APIx79G1EGpkb9hYeu9Am8iioBvjVzi/NKK:bTkjQx79G1poWl9ddLD2/sK
- TLSH T1DC05220E374660BAC7E0C2B688F7412189357D01A7FD18DB97BBDB6227235C127BD688
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4152-0-0x00007FF74AA50000-0x00007FF74AB4F000-memory.dmp upx