General
- Target 2026-08-10_b6ece6d358aa031d1227cc8be22baa4c_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 483KB
- Sample260810-qsrkaaak31
- SHA256 45342dcd13231424446b800731a442863a2bd2afbd741076c2d02adc641c0ded
- MD5 b6ece6d358aa031d1227cc8be22baa4c
- SHA1 831232628cef03229abb7741ff75e8b3195d4991
- SHA512 5acd2952819254e76cfa4a6f1819dfe91aef738d6bfdfdb6ff7820a555eca95b560b5225ab20a150b76580cb17a42aa0614af868178ab50aeab4ba9c1ed752d8
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1lt+:2pkbi5qjhZ3CmW9lsq+eYmd
- TLSH T1C1B46C1277C1C492F9741171C88A81F41557FCA8E7B166ABB1823F5BB9F13D2182BE8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_b6ece6d358aa031d1227cc8be22baa4c_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_b6ece6d358aa031d1227cc8be22baa4c_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_b6ece6d358aa031d1227cc8be22baa4c_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 483KB
- SHA256 45342dcd13231424446b800731a442863a2bd2afbd741076c2d02adc641c0ded
- MD5 b6ece6d358aa031d1227cc8be22baa4c
- SHA1 831232628cef03229abb7741ff75e8b3195d4991
- SHA512 5acd2952819254e76cfa4a6f1819dfe91aef738d6bfdfdb6ff7820a555eca95b560b5225ab20a150b76580cb17a42aa0614af868178ab50aeab4ba9c1ed752d8
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1lt+:2pkbi5qjhZ3CmW9lsq+eYmd
- TLSH T1C1B46C1277C1C492F9741171C88A81F41557FCA8E7B166ABB1823F5BB9F13D2182BE8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.