General
- Target 2026-08-07_5df16bf1f4a8a3b353141f58aeebf7a4_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 552KB
- Sample260808-bn16laxcrb
- SHA256 6583c10c2c8cb63cb4844993afc85a2b77802558cd629687e3526f5cc574683e
- MD5 5df16bf1f4a8a3b353141f58aeebf7a4
- SHA1 a783f6843bab4a81aafc636b71a7c9fd740bbb09
- SHA512 fcafee3c85e8d15cbde480b411bc1a16313464d0489fe502dddad2118dc072fe0a3685f081cd507c850119fc6163f4a0fc797bf6e2b9befca7dc15a184ca7aca
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltn:2pkbi5qjhZ3CmW9lsq+eY5H
- TLSH T13AC44A02B7C4C492F57406B0C84641F4551BBDD8E6B227ABF1463FCBB9B63D1582BACA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_5df16bf1f4a8a3b353141f58aeebf7a4_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_5df16bf1f4a8a3b353141f58aeebf7a4_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_5df16bf1f4a8a3b353141f58aeebf7a4_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 552KB
- SHA256 6583c10c2c8cb63cb4844993afc85a2b77802558cd629687e3526f5cc574683e
- MD5 5df16bf1f4a8a3b353141f58aeebf7a4
- SHA1 a783f6843bab4a81aafc636b71a7c9fd740bbb09
- SHA512 fcafee3c85e8d15cbde480b411bc1a16313464d0489fe502dddad2118dc072fe0a3685f081cd507c850119fc6163f4a0fc797bf6e2b9befca7dc15a184ca7aca
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltn:2pkbi5qjhZ3CmW9lsq+eY5H
- TLSH T13AC44A02B7C4C492F57406B0C84641F4551BBDD8E6B227ABF1463FCBB9B63D1582BACA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.