General
- Target 2026-09-05_76e0e3ca55bdfc4d958596908290ed27_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 500KB
- Sample260907-vg9zpsaa85
- SHA256 2665f8b83cb7f8caa02ce0844a9c9307eddd6ce25ef7a1b1d9db4efe1d7822d8
- MD5 76e0e3ca55bdfc4d958596908290ed27
- SHA1 c9c503ead907825ba7b4662d4804b60ed7315f77
- SHA512 3307355569aa4d5dd3ed715bf5a00167f09f26f8950decd402d1a67e6aeb95f77b113877b0876b571aa6026c456aa2dc8b913412875671b068cd36003742370d
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltb:2pkbi5qjhZ3CmW9lsq+eYyo
- TLSH T1AFB44B1277C1C492F9740671C88A81F41157BC98D7B167ABF1823F9B79F23D2582BA8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_76e0e3ca55bdfc4d958596908290ed27_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-05_76e0e3ca55bdfc4d958596908290ed27_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_76e0e3ca55bdfc4d958596908290ed27_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 500KB
- SHA256 2665f8b83cb7f8caa02ce0844a9c9307eddd6ce25ef7a1b1d9db4efe1d7822d8
- MD5 76e0e3ca55bdfc4d958596908290ed27
- SHA1 c9c503ead907825ba7b4662d4804b60ed7315f77
- SHA512 3307355569aa4d5dd3ed715bf5a00167f09f26f8950decd402d1a67e6aeb95f77b113877b0876b571aa6026c456aa2dc8b913412875671b068cd36003742370d
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltb:2pkbi5qjhZ3CmW9lsq+eYyo
- TLSH T1AFB44B1277C1C492F9740671C88A81F41157BC98D7B167ABF1823F9B79F23D2582BA8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.