General
- Target 2026-07-17_0dd41404024ae82c903511370075c76f_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 502KB
- Sample260717-kf591sbs4t
- SHA256 72ca5f8b1c9bb231e902ab24342e9cb0369475564844deac4c336fd38a21001a
- MD5 0dd41404024ae82c903511370075c76f
- SHA1 327fbbbe609dfe8b0ea96a709a762ae725ee4b0e
- SHA512 436bd4a4e3a028899f99fbc202ba376b3536d8555125b416a441dc76e53e259251a926b362415a68999c9f539cb8f07b266c4535ddae48551f75aa6d97660b4a
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltw:2pkbi5qjhZ3CmW9lsq+eY0L
- TLSH T127B44B1277C2C496F9740171D88A81F4015BBC68D7B267ABB1823F5BB5F23D1192BACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_0dd41404024ae82c903511370075c76f_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_0dd41404024ae82c903511370075c76f_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_0dd41404024ae82c903511370075c76f_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 502KB
- SHA256 72ca5f8b1c9bb231e902ab24342e9cb0369475564844deac4c336fd38a21001a
- MD5 0dd41404024ae82c903511370075c76f
- SHA1 327fbbbe609dfe8b0ea96a709a762ae725ee4b0e
- SHA512 436bd4a4e3a028899f99fbc202ba376b3536d8555125b416a441dc76e53e259251a926b362415a68999c9f539cb8f07b266c4535ddae48551f75aa6d97660b4a
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltw:2pkbi5qjhZ3CmW9lsq+eY0L
- TLSH T127B44B1277C2C496F9740171D88A81F4015BBC68D7B267ABB1823F5BB5F23D1192BACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.