General
- Target 2026-06-26_595c01a1413ade7e6e66ad74826b9860_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 475KB
- Sample260629-tabmwsax4p
- SHA256 25f5bf135dd31e960b39ef8b1b1555b3680622cc6a6ae4d6359d2d13ca2c7480
- MD5 595c01a1413ade7e6e66ad74826b9860
- SHA1 8ba9768d717d158525dfbb5a2051c435f165f18e
- SHA512 76a0c3e39fd34c0fb004157a2c872cf3a3362fbfe5a31438bd948cb24668473c90e6755eb6ae1d6fff004ba2d518d2623e1209a54293ea4e42e95c35dfa17d12
- SSDEEP 6144:t6LT6OYdZFo/Dj9lEYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltzqtO:0LTF9jvEZ3CmW9lsq+eYzJ
- TLSH T149A43902B7C5C497F9781570C88681F0115BFC68E7B162ABB1967F5B79F13E1082FA8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_595c01a1413ade7e6e66ad74826b9860_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_595c01a1413ade7e6e66ad74826b9860_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260629-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_595c01a1413ade7e6e66ad74826b9860_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 475KB
- SHA256 25f5bf135dd31e960b39ef8b1b1555b3680622cc6a6ae4d6359d2d13ca2c7480
- MD5 595c01a1413ade7e6e66ad74826b9860
- SHA1 8ba9768d717d158525dfbb5a2051c435f165f18e
- SHA512 76a0c3e39fd34c0fb004157a2c872cf3a3362fbfe5a31438bd948cb24668473c90e6755eb6ae1d6fff004ba2d518d2623e1209a54293ea4e42e95c35dfa17d12
- SSDEEP 6144:t6LT6OYdZFo/Dj9lEYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltzqtO:0LTF9jvEZ3CmW9lsq+eYzJ
- TLSH T149A43902B7C5C497F9781570C88681F0115BFC68E7B162ABB1967F5B79F13E1082FA8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.