General
- Target 2026-06-30_6a4501e1172d742fafc28d50c6d8788b_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 506KB
- Sample260701-e5qyqset4q
- SHA256 0d9f716171f8eeaf271c1fd1467d6017943cd4597276318980a8fa74fed3a49b
- MD5 6a4501e1172d742fafc28d50c6d8788b
- SHA1 08caf5a4c94c9062f4f5f93cc8dccf6ef8141ee9
- SHA512 9968f69f60c6f7fd43d5e011298d812bb2bbaf15f5acb3ca1207bf695248bded1095c937eaa4d035dca93be3406f40440f1054adb578e6a1e7947e8a765c8fbf
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1lt/:2pkbi5qjhZ3CmW9lsq+eYAUMc
- TLSH T139B44B02B7C1C492FAB50271C48A80F45157FC98D6B167ABB2853F9BB9F13D1582FAC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_6a4501e1172d742fafc28d50c6d8788b_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_6a4501e1172d742fafc28d50c6d8788b_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260629-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_6a4501e1172d742fafc28d50c6d8788b_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 506KB
- SHA256 0d9f716171f8eeaf271c1fd1467d6017943cd4597276318980a8fa74fed3a49b
- MD5 6a4501e1172d742fafc28d50c6d8788b
- SHA1 08caf5a4c94c9062f4f5f93cc8dccf6ef8141ee9
- SHA512 9968f69f60c6f7fd43d5e011298d812bb2bbaf15f5acb3ca1207bf695248bded1095c937eaa4d035dca93be3406f40440f1054adb578e6a1e7947e8a765c8fbf
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1lt/:2pkbi5qjhZ3CmW9lsq+eYAUMc
- TLSH T139B44B02B7C1C492FAB50271C48A80F45157FC98D6B167ABB2853F9BB9F13D1582FAC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.