General
- Target 2026-07-12_39c5bf06d4a4f5f3799482cc416f65f3_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 483KB
- Sample260712-qx2aaaay7n
- SHA256 37b2b882b4ba43122f6092f45f15febfbea081257cbfe3d691b11de04a8b3c0c
- MD5 39c5bf06d4a4f5f3799482cc416f65f3
- SHA1 8dac24ef9dd7144db8fecbc95796ccd04e8a7df3
- SHA512 3958c443a292249f5952de62f89a46762709c6e40825b34bb8c9ff129569fecffa9dba09795f2ba3ec3ce13a40c39bbc4b2b8f398588fecaa5699e179241c9bb
- SSDEEP 12288:2pkbi5qjhZ3CmW9lsq+eYvEGSvoSC45jsKjeM3d4ZQBGsyX4a6yy345Z9C2lkS:r1hUmVxeYvEGSvoSC45jsKjeM3d4ZQBa
- TLSH T1E9B46C1277C1C493F5740570C88A81F4115BBCA8D7B156ABB1823FAFB5F63D2192BA8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_39c5bf06d4a4f5f3799482cc416f65f3_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_39c5bf06d4a4f5f3799482cc416f65f3_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_39c5bf06d4a4f5f3799482cc416f65f3_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 483KB
- SHA256 37b2b882b4ba43122f6092f45f15febfbea081257cbfe3d691b11de04a8b3c0c
- MD5 39c5bf06d4a4f5f3799482cc416f65f3
- SHA1 8dac24ef9dd7144db8fecbc95796ccd04e8a7df3
- SHA512 3958c443a292249f5952de62f89a46762709c6e40825b34bb8c9ff129569fecffa9dba09795f2ba3ec3ce13a40c39bbc4b2b8f398588fecaa5699e179241c9bb
- SSDEEP 12288:2pkbi5qjhZ3CmW9lsq+eYvEGSvoSC45jsKjeM3d4ZQBGsyX4a6yy345Z9C2lkS:r1hUmVxeYvEGSvoSC45jsKjeM3d4ZQBa
- TLSH T1E9B46C1277C1C493F5740570C88A81F4115BBCA8D7B156ABB1823FAFB5F63D2192BA8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.