Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/11/2026, 09:18
Behavioral task
behavioral1
Sample
2026-11-01_c4aa5289a432515550c0f8b4d1a5db3c_cobalt-strike_mespinoza.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_c4aa5289a432515550c0f8b4d1a5db3c_cobalt-strike_mespinoza.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-11-01_c4aa5289a432515550c0f8b4d1a5db3c_cobalt-strike_mespinoza.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-11-01_c4aa5289a432515550c0f8b4d1a5db3c_cobalt-strike_mespinoza.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-11-01_c4aa5289a432515550c0f8b4d1a5db3c_cobalt-strike_mespinoza.exe
- Size 820KB
- Sample261102-k925fssshx
- SHA256 95f7242b096142b76dbcde3a64a68f12a514267f1beb2834e726575a322d536e
- MD5 c4aa5289a432515550c0f8b4d1a5db3c
- SHA1 58813c187d161f8eee2c0740307de1f55c089427
- SHA512 e8f4d21cc664aeec042a97f1a911493c3445194f1f9dbf8eb9e3dc1803f5c4385d002bc0fd11edc81ffa177a862b6e4f9d9e580c7d47b600296fa2774285e7ab
- SSDEEP 12288:MxMTFovJE+ZUgJVmq692XXHsSUB2EBqGc0NOV1DDD6r0orPga2ZZejUess7eNaUk:MSTFAXZUmU9GMSUi3Ec5DGx4a2LGLlv
- TLSH T109052313470102DAEB56C570F99B1566AEF27C4A5F311FCFC3E18FA40A042E52FB6A66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2932-0-0x00007FF74EB20000-0x00007FF74ECF2000-memory.dmp upx