2026-08-10_885a83f3e37d41cf80a7ca6cff911561_amadey_cobalt-strike_elex_hellokitty

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_885a83f3e37d41cf80a7ca6cff911561_amadey_cobalt-strike_elex_hellokitty
Size 188KB
Sample260810-e4t9rs1dqa
SHA256 711a1dd6e4f5343767b9cf358c0aa36b3f5d66daea452e105168f05af969406f
MD5 885a83f3e37d41cf80a7ca6cff911561
SHA1 c669307797cfbfc45719feb83a745781ca16b2ba
SHA512 ae9390c1aeec5c1ee5637a87ef2624964239330b6e425724a7a2a3c8e85a067b3c2165d7faf770b2f13bf0e726e17d2ff4ab7a30a8e40c7045cab78032a2d4c7
SSDEEP 3072:XND8vj60I1/PXyQuRMI3ef+xli9H9YkvzRxyKz6UYrFOAg0Fuj1yyrB72LR5YbSv:9D8LgNyQNj+xlw+iRHzvAODB72LR5Ybm
TLSH
T1BC146C1174D2C0B2D9B2193104F4DBB59A7EF8310F6159BB77A80B7E4F342D2AA31A67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-08-10_885a83f3e37d41cf80a7ca6cff911561_amadey_cobalt-strike_elex_hellokitty

.exe 188KB

2026-08-10_885a83f3e37d41cf80a7ca6cff911561_amadey_cobalt-strike_elex_hellokitty

IMPHASH de3e0f8215b43c1b7214b57f39c81443
SHA256 711a1dd6e4f5343767b9cf358c0aa36b3f5d66daea452e105168f05af969406f
MD5 885a83f3e37d41cf80a7ca6cff911561
SHA1 c669307797cfbfc45719feb83a745781ca16b2ba
SHA512 ae9390c1aeec5c1ee5637a87ef2624964239330b6e425724a7a2a3c8e85a067b3c2165d7faf770b2f13bf0e726e17d2ff4ab7a30a8e40c7045cab78032a2d4c7
SSDEEP 3072:XND8vj60I1/PXyQuRMI3ef+xli9H9YkvzRxyKz6UYrFOAg0Fuj1yyrB72LR5YbSv:9D8LgNyQNj+xlw+iRHzvAODB72LR5Ybm
TLSH
T1BC146C1174D2C0B2D9B2193104F4DBB59A7EF8310F6159BB77A80B7E4F342D2AA31A67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

26:5a:68:07:6e:c7:4a:63:8c:df:83:d1:2d:a3:08:bc:3d:39:f3:64:18:c9:a1:be:cb:1d:51:92:81:62:91:ca

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=uvnc bvba,O=uvnc bvba,ST=Antwerpen,C=BE

Chains

May 7, 2025

CN=uvnc bvba,O=uvnc bvba,ST=Antwerpen,C=BE

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=uvnc bvba,O=uvnc bvba,ST=Antwerpen,C=BE

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=uvnc bvba,O=uvnc bvba,ST=Antwerpen,C=BE

Serial Number

4c:03:67:0a:31:e6:2b:9f:ac:b9:d2:d3:70:39:bd:07

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 23, 2022 - Sep 22, 2025

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=Sectigo Public Time Stamping Signer R36,O=Sectigo Limited,ST=West Yorkshire,C=GB

Serial Number

a4:29:3b:6e:1e:dd:d7:a7:34:08:87:ad:7a:4e:b7:24

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 27, 2025 - Mar 21, 2036

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Serial Number

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Serial Number

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Jan 18, 2038

Minor OS version

Major OS version

Entry point

13723

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\rudi\Desktop\git_ultravnc\winvnc\Release\createpassword.pdb

kernel32

WritePrivateProfileStructA GetModuleFileNameA WritePrivateProfileStringA GetVolumeInformationA GetSystemInfo CreateFileW HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetStringTypeW GetCPInfo RtlUnwind RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CompareStringW LCMapStringW GetProcessHeap CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc WriteConsoleW

user32

wsprintfA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_885a83f3e37d41cf80a7ca6cff911561_amadey_cobalt-strike_elex_hellokitty

kernel32

user32

generic