General
- Target 2026-07-18_6ca450880cbc739d75d309a3faef441b_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 784KB
- Sample260718-bc3v2sbs4n
- SHA256 fd111f2c0a9fa9846b91d922c656448eabdf029761c90d271196afa6a251b44c
- MD5 6ca450880cbc739d75d309a3faef441b
- SHA1 cf6b4d300d801f5233c30f32e5ed265c2a2f460e
- SHA512 c68b333bf40957a07b55c3064efce540a31541e7b7b8e311d316f5ab45b182713c721d5f42537f13b6beebfdfdf79c4b53c5fa052485ad74f28b3f58c0b75a48
- SSDEEP 12288:2pkbi5qjhZ3CmW9lsq+eYb69rYgxRuN3hANP:r1hUmVxeY4rYgxRuN3hANP
- TLSH T15105F84BBF85C181F2B402B6E04B08F04657AD84EAF67263F166FEC7B4792D1542BAC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_6ca450880cbc739d75d309a3faef441b_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_6ca450880cbc739d75d309a3faef441b_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_6ca450880cbc739d75d309a3faef441b_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 784KB
- SHA256 fd111f2c0a9fa9846b91d922c656448eabdf029761c90d271196afa6a251b44c
- MD5 6ca450880cbc739d75d309a3faef441b
- SHA1 cf6b4d300d801f5233c30f32e5ed265c2a2f460e
- SHA512 c68b333bf40957a07b55c3064efce540a31541e7b7b8e311d316f5ab45b182713c721d5f42537f13b6beebfdfdf79c4b53c5fa052485ad74f28b3f58c0b75a48
- SSDEEP 12288:2pkbi5qjhZ3CmW9lsq+eYb69rYgxRuN3hANP:r1hUmVxeY4rYgxRuN3hANP
- TLSH T15105F84BBF85C181F2B402B6E04B08F04657AD84EAF67263F166FEC7B4792D1542BAC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.