General
- Target 2026-07-12_417a1ba3f4145dec4a74dc1bf27c1353_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 455KB
- Sample260712-qswt1acx9y
- SHA256 b1f997455a493f7b05994c2463a3338c4e156088cb7667ab2b69423331921f82
- MD5 417a1ba3f4145dec4a74dc1bf27c1353
- SHA1 5e8bb4f37052ad9476438c22d8a59ff68bc5d5c8
- SHA512 b12f8d5ec1ae6aac1a2e1ab0dc193f43b3eca5bcf74bcc560c73819d725e6b48e1ad4b51bf36c240f537bc8973990c45fb0ba2cd78ff544bcde795c48294aa97
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltZ:2pkbi5qjhZ3CmW9lsq+eY/
- TLSH T161A45B1277C2C497F9781570C88A81F40255FC6CD77266ABB1823F6E7AF23D1192BA4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_417a1ba3f4145dec4a74dc1bf27c1353_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_417a1ba3f4145dec4a74dc1bf27c1353_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_417a1ba3f4145dec4a74dc1bf27c1353_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 455KB
- SHA256 b1f997455a493f7b05994c2463a3338c4e156088cb7667ab2b69423331921f82
- MD5 417a1ba3f4145dec4a74dc1bf27c1353
- SHA1 5e8bb4f37052ad9476438c22d8a59ff68bc5d5c8
- SHA512 b12f8d5ec1ae6aac1a2e1ab0dc193f43b3eca5bcf74bcc560c73819d725e6b48e1ad4b51bf36c240f537bc8973990c45fb0ba2cd78ff544bcde795c48294aa97
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltZ:2pkbi5qjhZ3CmW9lsq+eY/
- TLSH T161A45B1277C2C497F9781570C88A81F40255FC6CD77266ABB1823F6E7AF23D1192BA4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.