General
- Target 2026-06-02_ef5bce744c2abec8796fec21ab40af50_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 440KB
- Sample260602-d775csev4j
- SHA256 17d586f9035b98a28b7288520f6ab505c7cd7d2b97f21a9db0d401522d54c946
- MD5 ef5bce744c2abec8796fec21ab40af50
- SHA1 ddbe874989338d97d9f7e67ae29a40802bd4b719
- SHA512 6dc0b926a01bc7a2f9bfcd71e1f2a60dc42c8144c4a6f8cb8040bd8c23025daa012b97232e656c1a56721637941670f765374a8b07f79a2d62c447e9d154f445
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1lti:2pkbi5qjhZ3CmW9lsq+eY+i5LW
- TLSH T1C1A45B1177C2C4A7E9691470CC9AC1F40659FC6CDB6156AFB1823F2E7AF23D1192BA0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_ef5bce744c2abec8796fec21ab40af50_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_ef5bce744c2abec8796fec21ab40af50_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_ef5bce744c2abec8796fec21ab40af50_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 440KB
- SHA256 17d586f9035b98a28b7288520f6ab505c7cd7d2b97f21a9db0d401522d54c946
- MD5 ef5bce744c2abec8796fec21ab40af50
- SHA1 ddbe874989338d97d9f7e67ae29a40802bd4b719
- SHA512 6dc0b926a01bc7a2f9bfcd71e1f2a60dc42c8144c4a6f8cb8040bd8c23025daa012b97232e656c1a56721637941670f765374a8b07f79a2d62c447e9d154f445
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1lti:2pkbi5qjhZ3CmW9lsq+eY+i5LW
- TLSH T1C1A45B1177C2C4A7E9691470CC9AC1F40659FC6CDB6156AFB1823F2E7AF23D1192BA0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.