General
- Target 2026-08-08_7eeb9f63269ebc5c318f78eccfe59a69_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 497KB
- Sample260808-ds69hsygnb
- SHA256 13e2d7f43b564f46b4986ac9b3a4fdda7f904601a79cc3bc172629ddaf6d6336
- MD5 7eeb9f63269ebc5c318f78eccfe59a69
- SHA1 7173da8072130a29c174a1759292235ad19b57ad
- SHA512 8feaf18407b3fc5f86632701902092dd8006c650f76cd48cc21448b824147673b904c415d0e61ff361e67c0ff2528c7e93fe51aa2f97fb636296f0684fe4aaf1
- SSDEEP 12288:2pkbi5qjhZ3CmW9lsq+eYi86lrLayX8g3Yz9a8sO4E1uxHq2Sn:r1hUmVxeYo2kQ
- TLSH T17DB45C02B7C1C492F97816B1C84A81F45557FC98D7B1279BB2823F5B79F13D2182BA8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_7eeb9f63269ebc5c318f78eccfe59a69_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_7eeb9f63269ebc5c318f78eccfe59a69_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_7eeb9f63269ebc5c318f78eccfe59a69_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 497KB
- SHA256 13e2d7f43b564f46b4986ac9b3a4fdda7f904601a79cc3bc172629ddaf6d6336
- MD5 7eeb9f63269ebc5c318f78eccfe59a69
- SHA1 7173da8072130a29c174a1759292235ad19b57ad
- SHA512 8feaf18407b3fc5f86632701902092dd8006c650f76cd48cc21448b824147673b904c415d0e61ff361e67c0ff2528c7e93fe51aa2f97fb636296f0684fe4aaf1
- SSDEEP 12288:2pkbi5qjhZ3CmW9lsq+eYi86lrLayX8g3Yz9a8sO4E1uxHq2Sn:r1hUmVxeYo2kQ
- TLSH T17DB45C02B7C1C492F97816B1C84A81F45557FC98D7B1279BB2823F5B79F13D2182BA8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.