General
- Target 2026-07-07_bf95cd09ebce9ef5aaf9245b4e5f17c4_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 486KB
- Sample260707-lz4e7sfs6w
- SHA256 8792023b961b672ab47d10ce1292b4ad0c4ff44b87bc9c029c0743f26017b82a
- MD5 bf95cd09ebce9ef5aaf9245b4e5f17c4
- SHA1 6058847618af1c8affad6e1f0be9f26a6a1cab33
- SHA512 9ff5eafcfa9374cce53b239d003feee0440402249ac050fee0a355da50c61a224230ec59493b24d2c605a806ddd3c86c2afd8c7e9d1c7ff0c5b5fda6c149d7b8
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltT:2pkbi5qjhZ3CmW9lsq+eY+M
- TLSH T16CB47D1277C5C492F9B40570C88A81F4115BBCA8DBB256ABB1823F9B79F13D1152FB8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_bf95cd09ebce9ef5aaf9245b4e5f17c4_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_bf95cd09ebce9ef5aaf9245b4e5f17c4_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260706-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_bf95cd09ebce9ef5aaf9245b4e5f17c4_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 486KB
- SHA256 8792023b961b672ab47d10ce1292b4ad0c4ff44b87bc9c029c0743f26017b82a
- MD5 bf95cd09ebce9ef5aaf9245b4e5f17c4
- SHA1 6058847618af1c8affad6e1f0be9f26a6a1cab33
- SHA512 9ff5eafcfa9374cce53b239d003feee0440402249ac050fee0a355da50c61a224230ec59493b24d2c605a806ddd3c86c2afd8c7e9d1c7ff0c5b5fda6c149d7b8
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltT:2pkbi5qjhZ3CmW9lsq+eY+M
- TLSH T16CB47D1277C5C492F9B40570C88A81F4115BBCA8DBB256ABB1823F9B79F13D1152FB8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.