2026-08-10_b68d4ca7005b5f3f2df6bdcf06c9816a_amadey_cobalt-strike_elex_hellokitty

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_b68d4ca7005b5f3f2df6bdcf06c9816a_amadey_cobalt-strike_elex_hellokitty
Size 188KB
Sample260810-epdcps1bmb
SHA256 568074163e6d0cb6dc2afbce59b4ec278453740066825912147eb1ba46d4f20e
MD5 b68d4ca7005b5f3f2df6bdcf06c9816a
SHA1 2ec229b976d7bbff0b247456bb9cf4450c2132a0
SHA512 7da4c64a98dd82d294c7b40b3f3aa1fb08aef04089b33d5cb0e3420fdac44fc59d7a6a499e5b615bcb83c3ec827f9f25fdd68a13c245a136bb0dc91432233f82
SSDEEP 3072:END8vj60I1/PXyQuRMI3ef+xli9H9YkvzRxyKz6UYrFOAg0Fuj1wyrB72LRAYVV9:ED8LgNyQNj+xlw+iRHzvAOpB72LRAYVn
TLSH
T108146C1174D2C0B2D9B2153104F4DBB59A7EF8310F619DBB67A80B7E4F342D2AA31A67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-08-10_b68d4ca7005b5f3f2df6bdcf06c9816a_amadey_cobalt-strike_elex_hellokitty

.exe 188KB

2026-08-10_b68d4ca7005b5f3f2df6bdcf06c9816a_amadey_cobalt-strike_elex_hellokitty

IMPHASH de3e0f8215b43c1b7214b57f39c81443
SHA256 568074163e6d0cb6dc2afbce59b4ec278453740066825912147eb1ba46d4f20e
MD5 b68d4ca7005b5f3f2df6bdcf06c9816a
SHA1 2ec229b976d7bbff0b247456bb9cf4450c2132a0
SHA512 7da4c64a98dd82d294c7b40b3f3aa1fb08aef04089b33d5cb0e3420fdac44fc59d7a6a499e5b615bcb83c3ec827f9f25fdd68a13c245a136bb0dc91432233f82
SSDEEP 3072:END8vj60I1/PXyQuRMI3ef+xli9H9YkvzRxyKz6UYrFOAg0Fuj1wyrB72LRAYVV9:ED8LgNyQNj+xlw+iRHzvAOpB72LRAYVn
TLSH
T108146C1174D2C0B2D9B2153104F4DBB59A7EF8310F619DBB67A80B7E4F342D2AA31A67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

73:ba:a7:bf:85:a3:83:e8:68:a6:e3:0b:cb:e5:85:d7:c8:04:8f:bb:48:fb:60:80:e8:7c:40:44:bb:d4:ef:3e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=uvnc bvba,O=uvnc bvba,ST=Antwerpen,C=BE

Chains

Jun 2, 2025

CN=uvnc bvba,O=uvnc bvba,ST=Antwerpen,C=BE

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=uvnc bvba,O=uvnc bvba,ST=Antwerpen,C=BE

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=uvnc bvba,O=uvnc bvba,ST=Antwerpen,C=BE

Serial Number

4c:03:67:0a:31:e6:2b:9f:ac:b9:d2:d3:70:39:bd:07

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 23, 2022 - Sep 22, 2025

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=Sectigo Public Time Stamping Signer R36,O=Sectigo Limited,ST=West Yorkshire,C=GB

Serial Number

a4:29:3b:6e:1e:dd:d7:a7:34:08:87:ad:7a:4e:b7:24

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 27, 2025 - Mar 21, 2036

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Serial Number

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Serial Number

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Jan 18, 2038

Minor OS version

Major OS version

Entry point

13723

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\rudi\Desktop\git_ultravnc\winvnc\Release\createpassword.pdb

kernel32

WritePrivateProfileStructA GetModuleFileNameA WritePrivateProfileStringA GetVolumeInformationA GetSystemInfo CreateFileW HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetStringTypeW GetCPInfo RtlUnwind RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CompareStringW LCMapStringW GetProcessHeap CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc WriteConsoleW

user32

wsprintfA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_b68d4ca7005b5f3f2df6bdcf06c9816a_amadey_cobalt-strike_elex_hellokitty

kernel32

user32

generic