General
- Target 2026-08-10_dd649e8220ca030414e35aae0afa5e2b_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 494KB
- Sample260810-b9dx7ayfkh
- SHA256 c929ab02d4ac534a21fbb644cc00a2b59e57ef653937f14dee1de2aa0983aa4b
- MD5 dd649e8220ca030414e35aae0afa5e2b
- SHA1 6e1ca2d1205730977953d724385e881cfa7ee5c0
- SHA512 44949b83f72af84580b1157a2340935009c1940341563b8ceca769ae36cfd27d327200367e47b054e1c452c8aafebf1e1716aba4c3c9b8a7fc01a7b92c19a1c6
- SSDEEP 12288:2pkbi5qjhZ3CmW9lsq+eYm8TwTeJd5tHlgg99HdRyXbr69IB5Lb0y6Cf50DDSfA7:r1hUmVxeYm8TwTeJd5tHlgg99HdRyXbm
- TLSH T1D5B46B0277C5C496F5B51170C88A80F4025BBC98D7B266AFB1827F6F75F23D1192BA8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_dd649e8220ca030414e35aae0afa5e2b_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_dd649e8220ca030414e35aae0afa5e2b_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_dd649e8220ca030414e35aae0afa5e2b_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 494KB
- SHA256 c929ab02d4ac534a21fbb644cc00a2b59e57ef653937f14dee1de2aa0983aa4b
- MD5 dd649e8220ca030414e35aae0afa5e2b
- SHA1 6e1ca2d1205730977953d724385e881cfa7ee5c0
- SHA512 44949b83f72af84580b1157a2340935009c1940341563b8ceca769ae36cfd27d327200367e47b054e1c452c8aafebf1e1716aba4c3c9b8a7fc01a7b92c19a1c6
- SSDEEP 12288:2pkbi5qjhZ3CmW9lsq+eYm8TwTeJd5tHlgg99HdRyXbr69IB5Lb0y6Cf50DDSfA7:r1hUmVxeYm8TwTeJd5tHlgg99HdRyXbm
- TLSH T1D5B46B0277C5C496F5B51170C88A80F4025BBC98D7B266AFB1827F6F75F23D1192BA8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.