General
- Target 2026-08-01_91f283ac0e916380060ec2deeea541d2_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 438KB
- Sample260801-dgdstsvvfw
- SHA256 59a477c62caac6faa1ffae6d6b16f1e9f53651b4d478896100977554002219fd
- MD5 91f283ac0e916380060ec2deeea541d2
- SHA1 811c5a7608c2127c3e08a6602d40fd7515e74e26
- SHA512 d1b118ec8b6b31d7e170107608a5ec64768428859a10c89a20d4a2e6e43856c4f54862c15f4da69ef2a8ac5e7777ec7ad6af6ed2eabe3dde1c4a6e6fddcdde19
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltQ:2pkbi5qjhZ3CmW9lsq+eYC
- TLSH T171945C1177C2C4A7E9691570CC9AC1F40558FC6CDB6156AFB1823F2E7AF23D1192BA0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_91f283ac0e916380060ec2deeea541d2_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_91f283ac0e916380060ec2deeea541d2_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_91f283ac0e916380060ec2deeea541d2_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 438KB
- SHA256 59a477c62caac6faa1ffae6d6b16f1e9f53651b4d478896100977554002219fd
- MD5 91f283ac0e916380060ec2deeea541d2
- SHA1 811c5a7608c2127c3e08a6602d40fd7515e74e26
- SHA512 d1b118ec8b6b31d7e170107608a5ec64768428859a10c89a20d4a2e6e43856c4f54862c15f4da69ef2a8ac5e7777ec7ad6af6ed2eabe3dde1c4a6e6fddcdde19
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltQ:2pkbi5qjhZ3CmW9lsq+eYC
- TLSH T171945C1177C2C4A7E9691570CC9AC1F40558FC6CDB6156AFB1823F2E7AF23D1192BA0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.