General
- Target 2026-07-18_a24552b8ccd3f678a279506bea74398d_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 437KB
- Sample260718-a88whaa12n
- SHA256 c9357a1c9fb431443add41473004831c7a03c5f33e3fa81be09725c52c5e1f30
- MD5 a24552b8ccd3f678a279506bea74398d
- SHA1 9c135dd0e95cdfae7984858a61515ad9330dfe23
- SHA512 48dce1deea547932389afa2edc900265d29eb75e1730f9308305e97d6060b3b7232fc265bbe3997ebf1475efb601426337046cb818de9357723a004947371f99
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltE:2pkbi5qjhZ3CmW9lsq+eY+
- TLSH T1A3945C1177C2C4A7E9691570CC9AC1F40558FC6CDB6196AFB1823F2E7AF23D1192BA0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_a24552b8ccd3f678a279506bea74398d_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_a24552b8ccd3f678a279506bea74398d_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_a24552b8ccd3f678a279506bea74398d_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 437KB
- SHA256 c9357a1c9fb431443add41473004831c7a03c5f33e3fa81be09725c52c5e1f30
- MD5 a24552b8ccd3f678a279506bea74398d
- SHA1 9c135dd0e95cdfae7984858a61515ad9330dfe23
- SHA512 48dce1deea547932389afa2edc900265d29eb75e1730f9308305e97d6060b3b7232fc265bbe3997ebf1475efb601426337046cb818de9357723a004947371f99
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltE:2pkbi5qjhZ3CmW9lsq+eY+
- TLSH T1A3945C1177C2C4A7E9691570CC9AC1F40558FC6CDB6196AFB1823F2E7AF23D1192BA0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.