2026-08-05_6424d7a211a9c68ea24a84162a68c09c_amadey_cobalt-strike_darkgate_elex_hellokitty

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-05_6424d7a211a9c68ea24a84162a68c09c_amadey_cobalt-strike_darkgate_elex_hellokitty
Size 485KB
Sample260805-m661caab86
SHA256 738a997f83f4b29dd519329b7d2e38e4a12b3f195876e34b6a9f5a2acd6112ab
MD5 6424d7a211a9c68ea24a84162a68c09c
SHA1 422f572f3fd3d878d7ff0bc95c4762aea3e0fa5e
SHA512 76ddcb768ba1a4d02c3302025c32c67ef6b0bd660ea68dea57d6500fc42bbb116984562e08e651920d7dd0d3e96ef5bb9b08d4286774f760d2e25868e3a6120e
SSDEEP 12288:2pkbi5qjhZ3CmW9lsq+eYT6aOiALFdYwDIqLkWKLYTvxbX/Csao:r1hUmVxeYT6aOiALFdYwDIqLkWKLYTvp
TLSH
T130B46C1277C5C492F9741170C84B81F4125BFCA8D7B166ABB1823FAB75F23D1192BA8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-05_6424d7a211a9c68ea24a84162a68c09c_amadey_cobalt-strike_darkgate_elex_hellokitty

File Explorer

2026-08-05_6424d7a211a9c68ea24a84162a68c09c_amadey_cobalt-strike_darkgate_elex_hellokitty

.exe 485KB

2026-08-05_6424d7a211a9c68ea24a84162a68c09c_amadey_cobalt-strike_darkgate_elex_hellokitty

IMPHASH 3cbd26f7129b578c97ad3b7168086223
SHA256 738a997f83f4b29dd519329b7d2e38e4a12b3f195876e34b6a9f5a2acd6112ab
MD5 6424d7a211a9c68ea24a84162a68c09c
SHA1 422f572f3fd3d878d7ff0bc95c4762aea3e0fa5e
SHA512 76ddcb768ba1a4d02c3302025c32c67ef6b0bd660ea68dea57d6500fc42bbb116984562e08e651920d7dd0d3e96ef5bb9b08d4286774f760d2e25868e3a6120e
SSDEEP 12288:2pkbi5qjhZ3CmW9lsq+eYT6aOiALFdYwDIqLkWKLYTvxbX/Csao:r1hUmVxeYT6aOiALFdYwDIqLkWKLYTvp
TLSH
T130B46C1277C5C492F9741170C84B81F4125BFCA8D7B166ABB1823FAB75F23D1192BA8E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27677

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnterCriticalSection FindNextFileW GetCurrentProcess WriteFile TerminateProcess RemoveDirectoryW GetModuleFileNameW SetThreadUILanguage InitializeCriticalSectionAndSpinCount LeaveCriticalSection GetTempPathW FindClose CreateFileW GetFileAttributesW SetFileAttributesW MultiByteToWideChar GetLastError DeleteFileW CloseHandle CreateThread GetProcAddress SetFilePointerEx GetFileSize DeleteCriticalSection GetModuleHandleW WideCharToMultiByte DecodePointer HeapReAlloc HeapSize FlushFileBuffers GetConsoleOutputCP GetStringTypeW GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW WriteConsoleW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindFirstFileExW SetThreadLocale FindFirstFileW ReadFile SetStdHandle UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind RaiseException SetLastError EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetFileType ExitProcess GetModuleHandleExW GetStdHandle GetConsoleMode HeapAlloc HeapFree LCMapStringW

user32

GetMessageW DefWindowProcW DestroyWindow MessageBoxExW SendMessageW GetSystemMetrics RegisterClassExW ShowWindow DispatchMessageW TranslateMessage LoadIconW PostQuitMessage EnableWindow CreateWindowExW

gdi32

CreateSolidBrush CreateFontW

advapi32

RegDeleteKeyW

shell32

ShellExecuteW SHGetSpecialFolderPathW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-05_6424d7a211a9c68ea24a84162a68c09c_amadey_cobalt-strike_darkgate_elex_hellokitty

kernel32

user32

gdi32

advapi32

shell32

generic