General
- Target 2026-08-28_dbe585dad1f81e28130019995453c300_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 492KB
- Sample260828-jf15mavcrc
- SHA256 63b356dfa866c114e4e2215b325b58c34bb2929563c83e07bdeb7e8c73fa9bdc
- MD5 dbe585dad1f81e28130019995453c300
- SHA1 9f43e3b72f3074a588bf81c86b1984d0efcac40a
- SHA512 7a541bdfb11ef71f2bcd844436da250b5c523ceded327408c77afa4d0c1fee97cd21c8816c102f4ce7c719cb59c7015c5e8f9eb3fd266c2eedde1246ace7b5c6
- SSDEEP 12288:2pkbi5qjhZ3CmW9lsq+eYJBxzKSyLDQ22bHVwLa0mPYjaqLRs:r1hUmVxeYJBxzKSyLDQ22bHVwLa0mPYe
- TLSH T1CCB45C12B7C1C492F9740170D88B81F4125BBCA8E7B1666BB1823F9B75F13D1592BB8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-28_dbe585dad1f81e28130019995453c300_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-28_dbe585dad1f81e28130019995453c300_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_dbe585dad1f81e28130019995453c300_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 492KB
- SHA256 63b356dfa866c114e4e2215b325b58c34bb2929563c83e07bdeb7e8c73fa9bdc
- MD5 dbe585dad1f81e28130019995453c300
- SHA1 9f43e3b72f3074a588bf81c86b1984d0efcac40a
- SHA512 7a541bdfb11ef71f2bcd844436da250b5c523ceded327408c77afa4d0c1fee97cd21c8816c102f4ce7c719cb59c7015c5e8f9eb3fd266c2eedde1246ace7b5c6
- SSDEEP 12288:2pkbi5qjhZ3CmW9lsq+eYJBxzKSyLDQ22bHVwLa0mPYjaqLRs:r1hUmVxeYJBxzKSyLDQ22bHVwLa0mPYe
- TLSH T1CCB45C12B7C1C492F9740170D88B81F4125BBCA8E7B1666BB1823F9B75F13D1592BB8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.