Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
27/10/2026, 18:05
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-10-26_4c0c6cea0ac89e31700b1871e08e9809_cobalt-strike_mespinoza.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-26_4c0c6cea0ac89e31700b1871e08e9809_cobalt-strike_mespinoza.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-10-26_4c0c6cea0ac89e31700b1871e08e9809_cobalt-strike_mespinoza.exe
- Size 819KB
- Sample261027-wpkkfstw3q
- SHA256 258b1f9520d55b9072b53ae4bf6ef40d926dd7ecb52754ac8199c2989a1678af
Score
5/10
Malware Config
Signatures
- UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-26_4c0c6cea0ac89e31700b1871e08e9809_cobalt-strike_mespinoza.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-26_4c0c6cea0ac89e31700b1871e08e9809_cobalt-strike_mespinoza.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1208-0-0x00007FF62A620000-0x00007FF62A71F000-memory.dmp
memory/1208-1-0x00007FF62A620000-0x00007FF62A71F000-memory.dmp