Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/10/2026, 00:23
Behavioral task
behavioral1
Sample
2026-10-25_7017b3d6a5a1bebe164e9500798f546f_cobalt-strike_mespinoza.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-25_7017b3d6a5a1bebe164e9500798f546f_cobalt-strike_mespinoza.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-10-25_7017b3d6a5a1bebe164e9500798f546f_cobalt-strike_mespinoza.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-25_7017b3d6a5a1bebe164e9500798f546f_cobalt-strike_mespinoza.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-10-25_7017b3d6a5a1bebe164e9500798f546f_cobalt-strike_mespinoza.exe
- Size 824KB
- Sample261027-ap1e1shv5s
- SHA256 86c17d3ab8349621340545f6b0f7deb5068b1433962876d3548df57ff916a0ac
- MD5 7017b3d6a5a1bebe164e9500798f546f
- SHA1 fa7365876acb9c4bffb1b799065287d2777f7d25
- SHA512 477fa5dfc9ffdf3a339ea04d4c93702ce58a93fff7a974b603ad49663b21cc71af5c693bb7e1202757895816b12f863067195b33197f88512d553066b8922f59
- SSDEEP 24576:FFTFo7hAOXEaSqxeafhW1ryi/ANO8cye6Q66CGnfm4/k:LTYhAqve5j/7Pye6QpCGfm4/k
- TLSH T1AF052323E68E387AC1E511B9D1936171A3337C8B17651ACF8CB652101F28FE36E759A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4824-0-0x00007FF767B60000-0x00007FF767C60000-memory.dmp upx