Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
02/11/2026, 15:45
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-11-01_8866bb589f2dcc3946ee0a0d284f1397_cobalt-strike_mespinoza.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-11-01_8866bb589f2dcc3946ee0a0d284f1397_cobalt-strike_mespinoza.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-11-01_8866bb589f2dcc3946ee0a0d284f1397_cobalt-strike_mespinoza.exe
- Size 819KB
- Sample261102-s63ktaxt8k
- SHA256 249df1f5312ce33a2c01e64ba92bd5adf4fe4344370cf131623c1e77b39db737
Score
5/10
Malware Config
Signatures
- UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-11-01_8866bb589f2dcc3946ee0a0d284f1397_cobalt-strike_mespinoza.exe"C:\Users\Admin\AppData\Local\Temp\2026-11-01_8866bb589f2dcc3946ee0a0d284f1397_cobalt-strike_mespinoza.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1900-0-0x00007FF672430000-0x00007FF67252F000-memory.dmp
memory/1900-1-0x00007FF672430000-0x00007FF67252F000-memory.dmp