General
- Target 2026-09-04_13022f5501b3d091b344d466d0cb79f2_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 487KB
- Sample260905-wml1hafb78
- SHA256 3e00276b6c58524e6f6ff18ffd506032b65b4299dc57464a3557b4e197b86fd6
- MD5 13022f5501b3d091b344d466d0cb79f2
- SHA1 ace3142eba33ccfc5254fe9143078df4dff5f6f6
- SHA512 6be0921edf1b08d46f533b2e30b979dcc223a98951ac13d7078896fc3a6e028c18385045d5f217d8680f265e7e2171d9e0342acc846c51c0dd9db30c23d34234
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1lt3:2pkbi5qjhZ3CmW9lsq+eYZXj
- TLSH T193B45C12B7C1C493F9B41570C88A81F41157FCA8D7B116ABB1863F5B79F23D2582BA8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_13022f5501b3d091b344d466d0cb79f2_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_13022f5501b3d091b344d466d0cb79f2_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_13022f5501b3d091b344d466d0cb79f2_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 487KB
- SHA256 3e00276b6c58524e6f6ff18ffd506032b65b4299dc57464a3557b4e197b86fd6
- MD5 13022f5501b3d091b344d466d0cb79f2
- SHA1 ace3142eba33ccfc5254fe9143078df4dff5f6f6
- SHA512 6be0921edf1b08d46f533b2e30b979dcc223a98951ac13d7078896fc3a6e028c18385045d5f217d8680f265e7e2171d9e0342acc846c51c0dd9db30c23d34234
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1lt3:2pkbi5qjhZ3CmW9lsq+eYZXj
- TLSH T193B45C12B7C1C493F9B41570C88A81F41157FCA8D7B116ABB1863F5B79F23D2582BA8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.