2026-08-28_2879d94231a2374ae191a145d099d80e_amadey_darkgate_elex_hellokitty

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-28_2879d94231a2374ae191a145d099d80e_amadey_darkgate_elex_hellokitty
Size 3.9MB
Sample260828-ynmpjasgmd
SHA256 833c8624a5b89858f5862b3d0b123e844cfc4cb8075f1b2231a4b1db8e4619d0
MD5 2879d94231a2374ae191a145d099d80e
SHA1 9e25b2943534928cf628f918fa2025bc8fff50c0
SHA512 0421c311f27e65f5fb8479f571ef857499b207463e31fe03029da7d5a1c96616e147c4adcc647045bad4226c7975473e3836d66c02ba3113a299d82c9271867f
SSDEEP 24576:r1hUmVxeY+eHuaxD1S8hyBa+T4kWJM2L1MzOdVrwYwOYgEP7WoWP8B+tmirh8orJ:rnubEU2L8kj
TLSH
T1E1161E427BF1DA51BAF4C37B153B091578630AE8DA782778FB8E7E8B5DC90C158422D2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-28_2879d94231a2374ae191a145d099d80e_amadey_darkgate_elex_hellokitty

File Explorer

2026-08-28_2879d94231a2374ae191a145d099d80e_amadey_darkgate_elex_hellokitty

.exe 3.9MB

2026-08-28_2879d94231a2374ae191a145d099d80e_amadey_darkgate_elex_hellokitty

IMPHASH 3cbd26f7129b578c97ad3b7168086223
SHA256 833c8624a5b89858f5862b3d0b123e844cfc4cb8075f1b2231a4b1db8e4619d0
MD5 2879d94231a2374ae191a145d099d80e
SHA1 9e25b2943534928cf628f918fa2025bc8fff50c0
SHA512 0421c311f27e65f5fb8479f571ef857499b207463e31fe03029da7d5a1c96616e147c4adcc647045bad4226c7975473e3836d66c02ba3113a299d82c9271867f
SSDEEP 24576:r1hUmVxeY+eHuaxD1S8hyBa+T4kWJM2L1MzOdVrwYwOYgEP7WoWP8B+tmirh8orJ:rnubEU2L8kj
TLSH
T1E1161E427BF1DA51BAF4C37B153B091578630AE8DA782778FB8E7E8B5DC90C158422D2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27677

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnterCriticalSection FindNextFileW GetCurrentProcess WriteFile TerminateProcess RemoveDirectoryW GetModuleFileNameW SetThreadUILanguage InitializeCriticalSectionAndSpinCount LeaveCriticalSection GetTempPathW FindClose CreateFileW GetFileAttributesW SetFileAttributesW MultiByteToWideChar GetLastError DeleteFileW CloseHandle CreateThread GetProcAddress SetFilePointerEx GetFileSize DeleteCriticalSection GetModuleHandleW WideCharToMultiByte DecodePointer HeapReAlloc HeapSize FlushFileBuffers GetConsoleOutputCP GetStringTypeW GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW WriteConsoleW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindFirstFileExW SetThreadLocale FindFirstFileW ReadFile SetStdHandle UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind RaiseException SetLastError EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetFileType ExitProcess GetModuleHandleExW GetStdHandle GetConsoleMode HeapAlloc HeapFree LCMapStringW

user32

GetMessageW DefWindowProcW DestroyWindow MessageBoxExW SendMessageW GetSystemMetrics RegisterClassExW ShowWindow DispatchMessageW TranslateMessage LoadIconW PostQuitMessage EnableWindow CreateWindowExW

gdi32

CreateSolidBrush CreateFontW

advapi32

RegDeleteKeyW

shell32

ShellExecuteW SHGetSpecialFolderPathW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-28_2879d94231a2374ae191a145d099d80e_amadey_darkgate_elex_hellokitty

kernel32

user32

gdi32

advapi32

shell32

generic