General
- Target 2026-09-03_d78e25817b5face432d63b4710bc0960_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 489KB
- Sample260903-1ch83sbg97
- SHA256 95fed7160e7c37c552832c715a8310964c56c468bbef0b8e124d2545f4355ba3
- MD5 d78e25817b5face432d63b4710bc0960
- SHA1 d5cd95a12a74bb1a535bdee008225cbceaa9f2ff
- SHA512 54610ccb46528fd5cf1b41a80284962e13ff873536bac929a45362e84bec0ea4d4b2817247782b734c7c353f709078d707a27f99eb8b1772c6b36a8b4a21b4f0
- SSDEEP 12288:2pkbi5qjhZ3CmW9lsq+eYo2tK0hs7KXAhgjE+eXS6DWZgaETV7VXb9zO0+QeBf:r1hUmVxeYo2tK0hs7KXAhgjE+eXS6DWl
- TLSH T162B46C12B7C1C493F5740170C88A85F4415BBCA8D7B266ABB1823F5F75F63D2192BA8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_d78e25817b5face432d63b4710bc0960_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-03_d78e25817b5face432d63b4710bc0960_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_d78e25817b5face432d63b4710bc0960_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 489KB
- SHA256 95fed7160e7c37c552832c715a8310964c56c468bbef0b8e124d2545f4355ba3
- MD5 d78e25817b5face432d63b4710bc0960
- SHA1 d5cd95a12a74bb1a535bdee008225cbceaa9f2ff
- SHA512 54610ccb46528fd5cf1b41a80284962e13ff873536bac929a45362e84bec0ea4d4b2817247782b734c7c353f709078d707a27f99eb8b1772c6b36a8b4a21b4f0
- SSDEEP 12288:2pkbi5qjhZ3CmW9lsq+eYo2tK0hs7KXAhgjE+eXS6DWZgaETV7VXb9zO0+QeBf:r1hUmVxeYo2tK0hs7KXAhgjE+eXS6DWl
- TLSH T162B46C12B7C1C493F5740170C88A85F4415BBCA8D7B266ABB1823F5F75F63D2192BA8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.