General
- Target 2026-08-04_bb9ae4fc18c5857bd279cdd32b350b77_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 458KB
- Sample260804-gcl57adg25
- SHA256 7dea9fc80fa9e13ee4344fa3795ea738a1dc90d25cbec1ee3bf2c4be6bfe33a9
- MD5 bb9ae4fc18c5857bd279cdd32b350b77
- SHA1 597e0d60b55f28272b5c26434d9c103cddd18165
- SHA512 27cb70df1a251540ce3b85535c9ec5d8bd0c9b413280974157dc5d67eaa77d0e00882887bc7548058ba0cf52c5041f99a902de8d1741e92cb8618870510927fa
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltF:2pkbi5qjhZ3CmW9lsq+eYUa
- TLSH T1EFA45B1177C2C497F9781570C88A81F40159FC68EB7166AFB1823F6B79F23D2192BA4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_bb9ae4fc18c5857bd279cdd32b350b77_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_bb9ae4fc18c5857bd279cdd32b350b77_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_bb9ae4fc18c5857bd279cdd32b350b77_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 458KB
- SHA256 7dea9fc80fa9e13ee4344fa3795ea738a1dc90d25cbec1ee3bf2c4be6bfe33a9
- MD5 bb9ae4fc18c5857bd279cdd32b350b77
- SHA1 597e0d60b55f28272b5c26434d9c103cddd18165
- SHA512 27cb70df1a251540ce3b85535c9ec5d8bd0c9b413280974157dc5d67eaa77d0e00882887bc7548058ba0cf52c5041f99a902de8d1741e92cb8618870510927fa
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltF:2pkbi5qjhZ3CmW9lsq+eYUa
- TLSH T1EFA45B1177C2C497F9781570C88A81F40159FC68EB7166AFB1823F6B79F23D2192BA4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.