General
- Target 2026-08-19_7a83b6232835cbc7b3c7e5e4eed86915_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 454KB
- Sample260820-b3dnvadj8y
- SHA256 9ba02fd94485645f2fd44bc1c855449288fc7732e4f30bde71d0af2e37068893
- MD5 7a83b6232835cbc7b3c7e5e4eed86915
- SHA1 0eae8dd45e9e746d84cd7161ec936864bcefce26
- SHA512 1b55776efae2d578e79d252d2bca0f21a0c52bb3e73b48d98e12dd56936ae85747c66fe8afd746212a571ed735beb38c7a19ac4b53832588653f1c5aa2bb2a45
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltt:2pkbi5qjhZ3CmW9lsq+eYz
- TLSH T14EA46B1177C2C4A6F9781570C89A81F40159FC6CDB7256ABB1823F2F7AF23D1192BA4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_7a83b6232835cbc7b3c7e5e4eed86915_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_7a83b6232835cbc7b3c7e5e4eed86915_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_7a83b6232835cbc7b3c7e5e4eed86915_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 454KB
- SHA256 9ba02fd94485645f2fd44bc1c855449288fc7732e4f30bde71d0af2e37068893
- MD5 7a83b6232835cbc7b3c7e5e4eed86915
- SHA1 0eae8dd45e9e746d84cd7161ec936864bcefce26
- SHA512 1b55776efae2d578e79d252d2bca0f21a0c52bb3e73b48d98e12dd56936ae85747c66fe8afd746212a571ed735beb38c7a19ac4b53832588653f1c5aa2bb2a45
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltt:2pkbi5qjhZ3CmW9lsq+eYz
- TLSH T14EA46B1177C2C4A6F9781570C89A81F40159FC6CDB7256ABB1823F2F7AF23D1192BA4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.