General
- Target 2026-07-07_4995f79ce483e26c8cc81c1d4aa2967b_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 604KB
- Sample260707-j3d9dadv2v
- SHA256 d2b22223d677f93f1f7ff268fe70e0645243703ae340584740073b31d2bb6b50
- MD5 4995f79ce483e26c8cc81c1d4aa2967b
- SHA1 2a8b5307e5e8bd158515d1b229214bb2309972ac
- SHA512 e8374f77fff336c8e6766f94d2f1989cc01a9c0b71ee9aa01b466cf43e1168138a9f3dab1c08fb24bcdb7c2f5ed04496361e4468b8f533db026adb837c3a0c2a
- SSDEEP 12288:2pkbi5qjhZ3CmW9lsq+eYH7BvjJEaB+C4ifQvbZ1iP:r1hUmVxeYrP
- TLSH T1F4D41803B784E586F57405B2C89644F01157FEC4EAB6A26BF4827FCBB8B53D1841AEC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_4995f79ce483e26c8cc81c1d4aa2967b_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_4995f79ce483e26c8cc81c1d4aa2967b_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260706-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_4995f79ce483e26c8cc81c1d4aa2967b_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 604KB
- SHA256 d2b22223d677f93f1f7ff268fe70e0645243703ae340584740073b31d2bb6b50
- MD5 4995f79ce483e26c8cc81c1d4aa2967b
- SHA1 2a8b5307e5e8bd158515d1b229214bb2309972ac
- SHA512 e8374f77fff336c8e6766f94d2f1989cc01a9c0b71ee9aa01b466cf43e1168138a9f3dab1c08fb24bcdb7c2f5ed04496361e4468b8f533db026adb837c3a0c2a
- SSDEEP 12288:2pkbi5qjhZ3CmW9lsq+eYH7BvjJEaB+C4ifQvbZ1iP:r1hUmVxeYrP
- TLSH T1F4D41803B784E586F57405B2C89644F01157FEC4EAB6A26BF4827FCBB8B53D1841AEC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.