General
- Target 2026-07-14_f200d07310bbc291ba0c535e0e9e32c8_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 485KB
- Sample260714-c8naxaez3v
- SHA256 737456ef94302ab0361e1712e2cc92f15801bd0214fc2495113a1ff4504747b8
- MD5 f200d07310bbc291ba0c535e0e9e32c8
- SHA1 eaecb3ec40b6048aea5ef2895181f27829092f6c
- SHA512 e9424f355f3b8eadf55dca96bb2f64fd46a14eb974e0c91342e8acb0c4a42008629e645b465ae94ec63a49c481300b23e9adedc1a1e8ba48a0cab938d376351d
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltB:2pkbi5qjhZ3CmW9lsq+eYq+
- TLSH T18AB44A1177C1C0A2F6B551B0D88684F05146BD28D7B1A6AFB2423FAB75F23D2192BECD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_f200d07310bbc291ba0c535e0e9e32c8_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_f200d07310bbc291ba0c535e0e9e32c8_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_f200d07310bbc291ba0c535e0e9e32c8_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 485KB
- SHA256 737456ef94302ab0361e1712e2cc92f15801bd0214fc2495113a1ff4504747b8
- MD5 f200d07310bbc291ba0c535e0e9e32c8
- SHA1 eaecb3ec40b6048aea5ef2895181f27829092f6c
- SHA512 e9424f355f3b8eadf55dca96bb2f64fd46a14eb974e0c91342e8acb0c4a42008629e645b465ae94ec63a49c481300b23e9adedc1a1e8ba48a0cab938d376351d
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltB:2pkbi5qjhZ3CmW9lsq+eYq+
- TLSH T18AB44A1177C1C0A2F6B551B0D88684F05146BD28D7B1A6AFB2423FAB75F23D2192BECD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.