General
- Target 2026-07-12_ed0da2d999bc9a0b9906eb332a80999e_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 487KB
- Sample260712-m2eqasgw3m
- SHA256 0bfc6902b55130f551a57f3b5bb289722bc667e09c7b48a9ea6187a7cdf88202
- MD5 ed0da2d999bc9a0b9906eb332a80999e
- SHA1 3c0063540f86eed11dfb38031cf615389b1915df
- SHA512 4b98cd426895f99af98c60b6cd850c4c8801e61f31dc432abc5f1f414c5a76b9b8098def50f1a548ad80b81f0ea3d043f4d9ec76a27238d6d8ea503a06eb5134
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1lte:2pkbi5qjhZ3CmW9lsq+eYk
- TLSH T1B1B44C0277C1C492FA781671C88A80F45157FCA8D7B163ABB1813F5BB9F13D1592BA8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_ed0da2d999bc9a0b9906eb332a80999e_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_ed0da2d999bc9a0b9906eb332a80999e_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_ed0da2d999bc9a0b9906eb332a80999e_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 487KB
- SHA256 0bfc6902b55130f551a57f3b5bb289722bc667e09c7b48a9ea6187a7cdf88202
- MD5 ed0da2d999bc9a0b9906eb332a80999e
- SHA1 3c0063540f86eed11dfb38031cf615389b1915df
- SHA512 4b98cd426895f99af98c60b6cd850c4c8801e61f31dc432abc5f1f414c5a76b9b8098def50f1a548ad80b81f0ea3d043f4d9ec76a27238d6d8ea503a06eb5134
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1lte:2pkbi5qjhZ3CmW9lsq+eYk
- TLSH T1B1B44C0277C1C492FA781671C88A80F45157FCA8D7B163ABB1813F5BB9F13D1592BA8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.