General
- Target 2026-08-05_6424d7a211a9c68ea24a84162a68c09c_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 485KB
- Sample260805-m661caab86
- SHA256 738a997f83f4b29dd519329b7d2e38e4a12b3f195876e34b6a9f5a2acd6112ab
- MD5 6424d7a211a9c68ea24a84162a68c09c
- SHA1 422f572f3fd3d878d7ff0bc95c4762aea3e0fa5e
- SHA512 76ddcb768ba1a4d02c3302025c32c67ef6b0bd660ea68dea57d6500fc42bbb116984562e08e651920d7dd0d3e96ef5bb9b08d4286774f760d2e25868e3a6120e
- SSDEEP 12288:2pkbi5qjhZ3CmW9lsq+eYT6aOiALFdYwDIqLkWKLYTvxbX/Csao:r1hUmVxeYT6aOiALFdYwDIqLkWKLYTvp
- TLSH T130B46C1277C5C492F9741170C84B81F4125BFCA8D7B166ABB1823FAB75F23D1192BA8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_6424d7a211a9c68ea24a84162a68c09c_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_6424d7a211a9c68ea24a84162a68c09c_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_6424d7a211a9c68ea24a84162a68c09c_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 485KB
- SHA256 738a997f83f4b29dd519329b7d2e38e4a12b3f195876e34b6a9f5a2acd6112ab
- MD5 6424d7a211a9c68ea24a84162a68c09c
- SHA1 422f572f3fd3d878d7ff0bc95c4762aea3e0fa5e
- SHA512 76ddcb768ba1a4d02c3302025c32c67ef6b0bd660ea68dea57d6500fc42bbb116984562e08e651920d7dd0d3e96ef5bb9b08d4286774f760d2e25868e3a6120e
- SSDEEP 12288:2pkbi5qjhZ3CmW9lsq+eYT6aOiALFdYwDIqLkWKLYTvxbX/Csao:r1hUmVxeYT6aOiALFdYwDIqLkWKLYTvp
- TLSH T130B46C1277C5C492F9741170C84B81F4125BFCA8D7B166ABB1823FAB75F23D1192BA8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.