General
- Target 2026-07-22_7e1b1bc3aa24ae861ee1b7dcec33355e_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 487KB
- Sample260722-16feaa1yht
- SHA256 77b88553abb76a40cd59e9f43cd2237e1b8592eee2ffc8e64646f40b4aeaa05b
- MD5 7e1b1bc3aa24ae861ee1b7dcec33355e
- SHA1 cef02fc27eec35a9e4fd6fc26a57cb141bc98458
- SHA512 bf256b5df5d7c0f62cd482e847f51224abec21b205ee0a08fa1b91e0b4738752d7bacea8f05f959c6bc7ed3727619ff6c0971ebb02b6e6a163ae69131c7e4e7e
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltf:2pkbi5qjhZ3CmW9lsq+eYOkX
- TLSH T116B45B02B7C1C496F9780671C88A81F4115BFC58E7B167ABB1827F5B79F13D2182BA8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_7e1b1bc3aa24ae861ee1b7dcec33355e_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_7e1b1bc3aa24ae861ee1b7dcec33355e_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_7e1b1bc3aa24ae861ee1b7dcec33355e_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 487KB
- SHA256 77b88553abb76a40cd59e9f43cd2237e1b8592eee2ffc8e64646f40b4aeaa05b
- MD5 7e1b1bc3aa24ae861ee1b7dcec33355e
- SHA1 cef02fc27eec35a9e4fd6fc26a57cb141bc98458
- SHA512 bf256b5df5d7c0f62cd482e847f51224abec21b205ee0a08fa1b91e0b4738752d7bacea8f05f959c6bc7ed3727619ff6c0971ebb02b6e6a163ae69131c7e4e7e
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltf:2pkbi5qjhZ3CmW9lsq+eYOkX
- TLSH T116B45B02B7C1C496F9780671C88A81F4115BFC58E7B167ABB1827F5B79F13D2182BA8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.