General
- Target 2026-08-15_5a67653ab12864624bf034e30865b762_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 509KB
- Sample260815-efmj1sem3s
- SHA256 2a9ddb55328dd083705d19f492508c34a315a0f380560a8f0cc20fe820eaedad
- MD5 5a67653ab12864624bf034e30865b762
- SHA1 9b2f8c80fa69cb5a8941a881d03fda458680bd22
- SHA512 13d10e7bec65a3c4b2993c69ff1c2e138041fa5db60aaa6dbe7c8df58e0543dcd4132866e9c0fdf1ac5af87241c4251e9a4ee933d085e200d29924f0c22a0799
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1lt5:2pkbi5qjhZ3CmW9lsq+eYFsQ
- TLSH T1A6B44C02B7C1C492F9741271C84A85F41557BC98D6B263ABF1813F9BB9F13D2582BACA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_5a67653ab12864624bf034e30865b762_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_5a67653ab12864624bf034e30865b762_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_5a67653ab12864624bf034e30865b762_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 509KB
- SHA256 2a9ddb55328dd083705d19f492508c34a315a0f380560a8f0cc20fe820eaedad
- MD5 5a67653ab12864624bf034e30865b762
- SHA1 9b2f8c80fa69cb5a8941a881d03fda458680bd22
- SHA512 13d10e7bec65a3c4b2993c69ff1c2e138041fa5db60aaa6dbe7c8df58e0543dcd4132866e9c0fdf1ac5af87241c4251e9a4ee933d085e200d29924f0c22a0799
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1lt5:2pkbi5qjhZ3CmW9lsq+eYFsQ
- TLSH T1A6B44C02B7C1C492F9741271C84A85F41557BC98D6B263ABF1813F9BB9F13D2582BACA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.