General
- Target 2026-08-27_66a25b45d140020142917934b1da5953_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 454KB
- Sample260827-thnx7abk2w
- SHA256 cc72a6c367e867fb6968544993ab04fe81d6cc4637606b1c3c77d47ea1d8c28e
- MD5 66a25b45d140020142917934b1da5953
- SHA1 eb1e8c1c4ec96c5223e886b8b78f78bbdd299b18
- SHA512 ae2031e848e80b3947e949de157121418d95f70a8abbe63490802c9be7d8beaaed3a5977b99e2817fe8eefbb38f9349819ff2a609068119736f93b54639d060d
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltK:2pkbi5qjhZ3CmW9lsq+eYk
- TLSH T12FA46B1277C2C497F9791170C89A81F40159FC6CE7B166ABB1823F6E79F23D1182BA4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_66a25b45d140020142917934b1da5953_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_66a25b45d140020142917934b1da5953_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_66a25b45d140020142917934b1da5953_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 454KB
- SHA256 cc72a6c367e867fb6968544993ab04fe81d6cc4637606b1c3c77d47ea1d8c28e
- MD5 66a25b45d140020142917934b1da5953
- SHA1 eb1e8c1c4ec96c5223e886b8b78f78bbdd299b18
- SHA512 ae2031e848e80b3947e949de157121418d95f70a8abbe63490802c9be7d8beaaed3a5977b99e2817fe8eefbb38f9349819ff2a609068119736f93b54639d060d
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltK:2pkbi5qjhZ3CmW9lsq+eYk
- TLSH T12FA46B1277C2C497F9791170C89A81F40159FC6CE7B166ABB1823F6E79F23D1182BA4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.