General
- Target 2026-07-22_01190ea4f2916260df3fb24957382244_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 576KB
- Sample260722-wxflgaaf29
- SHA256 57ae3781becf104b5c5de5283695ff0e7d37835b84852a236022637426acb071
- MD5 01190ea4f2916260df3fb24957382244
- SHA1 7b58e1e22b4f4ba64817eb6bb9ec35a34df2af88
- SHA512 85315ca6e9cd5db85971db8198dc45269f95b9623d74cba0e9deb04763c8cd5c6bedcfe2de8805952d864a8b51506acb917ff8a846e392ec1b5a8b32b105fcee
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltK:2pkbi5qjhZ3CmW9lsq+eYMIju5mr6
- TLSH T11DC44B07B780C4A2F6B40271D44A41F4525BBD88D6B2636BF1823F9BB5F53D1582BACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_01190ea4f2916260df3fb24957382244_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_01190ea4f2916260df3fb24957382244_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_01190ea4f2916260df3fb24957382244_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 576KB
- SHA256 57ae3781becf104b5c5de5283695ff0e7d37835b84852a236022637426acb071
- MD5 01190ea4f2916260df3fb24957382244
- SHA1 7b58e1e22b4f4ba64817eb6bb9ec35a34df2af88
- SHA512 85315ca6e9cd5db85971db8198dc45269f95b9623d74cba0e9deb04763c8cd5c6bedcfe2de8805952d864a8b51506acb917ff8a846e392ec1b5a8b32b105fcee
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltK:2pkbi5qjhZ3CmW9lsq+eYMIju5mr6
- TLSH T11DC44B07B780C4A2F6B40271D44A41F4525BBD88D6B2636BF1823F9BB5F53D1582BACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.