21dd3e05e596ae65df047e9fd90962a89cbaeaeef6b999118eb54212e6a54540

Analysis

max time kernel
0s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/11/2026, 12:33

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-11-09_9691aff84d9df6077261cafcbcfccdae_cobalt-strike_mespinoza.exe command="C:\Users\Admin\AppData\Local\Temp\2026-11-09_9691aff84d9df6077261cafcbcfccdae_cobalt-strike_mespinoza.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.

General

Target
2026-11-09_9691aff84d9df6077261cafcbcfccdae_cobalt-strike_mespinoza.exe
Size 820KB
Sample261110-prj85say41
SHA256 21dd3e05e596ae65df047e9fd90962a89cbaeaeef6b999118eb54212e6a54540
MD5 9691aff84d9df6077261cafcbcfccdae
SHA1 8852659cf1494d65fe82b8bbca4e9d11e85bb146
SHA512 7ce6939ee75d24fa0bab987231f86684400637d9771958c4a7ffa20c3b61d0e8cff4d26bba316bd91dcfd268ed253126ce5eace02375372d9e32e9421df047a3
SSDEEP 24576:MSTFpaKngL2jdshRTdG1YxITqvfPkbIcbjL:PTTarSj8RoTCC
TLSH
T1E505236BDFC142E0C42597F479E7AA0979B27A4D4B0F49CFC6E06B681E1A7D02B3C950
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/1792-0-0x00007FF604190000-0x00007FF604362000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2026-11-09_9691aff84d9df6077261cafcbcfccdae_cobalt-strike_mespinoza.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-09_9691aff84d9df6077261cafcbcfccdae_cobalt-strike_mespinoza.exe"
1⤵
PID:1792

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1792-0-0x00007FF604190000-0x00007FF604362000-memory.dmp

Download