General
- Target 2026-10-26_a6c5940ecb25bf4f7fa16d7249187628_cobalt-strike_mespinoza_satacom
- Size 88KB
- Sample261027-l1sebsb141
- SHA256 6e4f7a7ba95be8ca912581eeba3dcf43e5976e4f4754c703b36e4513fe400796
- MD5 a6c5940ecb25bf4f7fa16d7249187628
- SHA1 97267826449cda5638f8b06584fb2ae2b1789313
- SHA512 5edd7ed2c536099c7cd1ba9d60fd315e3a8d24fcc89aaaa5b655a287d359ae120ca50627977206cf0aab0cb1970e65c829066853f7718993901d4141b5c9e0bf
- SSDEEP 1536:qlro1OMLCyMT/fQASaUVeEdAXy7AG8Du6+WSss/eYwp:qho1ZLCy+BUldhUY6+WSvm
- TLSH T124937C4EFF4254BDC55EC0B882A349676932B09A0F61E9CF4681D32E1E79BF41B3DA50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_a6c5940ecb25bf4f7fa16d7249187628_cobalt-strike_mespinoza_satacom.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_a6c5940ecb25bf4f7fa16d7249187628_cobalt-strike_mespinoza_satacom.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_a6c5940ecb25bf4f7fa16d7249187628_cobalt-strike_mespinoza_satacom
- Size 88KB
- SHA256 6e4f7a7ba95be8ca912581eeba3dcf43e5976e4f4754c703b36e4513fe400796
- MD5 a6c5940ecb25bf4f7fa16d7249187628
- SHA1 97267826449cda5638f8b06584fb2ae2b1789313
- SHA512 5edd7ed2c536099c7cd1ba9d60fd315e3a8d24fcc89aaaa5b655a287d359ae120ca50627977206cf0aab0cb1970e65c829066853f7718993901d4141b5c9e0bf
- SSDEEP 1536:qlro1OMLCyMT/fQASaUVeEdAXy7AG8Du6+WSss/eYwp:qho1ZLCy+BUldhUY6+WSvm
- TLSH T124937C4EFF4254BDC55EC0B882A349676932B09A0F61E9CF4681D32E1E79BF41B3DA50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext