General
- Target 2026-09-07_521e37db3f6aff0f4a4172e9752d1f3a_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 477KB
- Sample260909-b28slazgpe
- SHA256 23422da16c8ca1da33359ef3c74d43c91bee030c706d8a70c884711dcf6c3621
- MD5 521e37db3f6aff0f4a4172e9752d1f3a
- SHA1 7895a9aa8868840fcef650a9f98c48f35526d2b3
- SHA512 3b30b070c23c126ff6053bd8a277e55cdbfea69ceb67a2de92e1d8e7a89ce00123cf7d77be4558535d3ba49c8b66f9615c5e978f29c90df384b27953fc1e8fb5
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltu:2pkbi5qjhZ3CmW9lsq+eYG9
- TLSH T1E0A46C1177C2C492F9B81171D88A81F4115AFC68DBB167ABB1823F6F75F23D1182BA8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-07_521e37db3f6aff0f4a4172e9752d1f3a_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_521e37db3f6aff0f4a4172e9752d1f3a_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_521e37db3f6aff0f4a4172e9752d1f3a_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 477KB
- SHA256 23422da16c8ca1da33359ef3c74d43c91bee030c706d8a70c884711dcf6c3621
- MD5 521e37db3f6aff0f4a4172e9752d1f3a
- SHA1 7895a9aa8868840fcef650a9f98c48f35526d2b3
- SHA512 3b30b070c23c126ff6053bd8a277e55cdbfea69ceb67a2de92e1d8e7a89ce00123cf7d77be4558535d3ba49c8b66f9615c5e978f29c90df384b27953fc1e8fb5
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltu:2pkbi5qjhZ3CmW9lsq+eYG9
- TLSH T1E0A46C1177C2C492F9B81171D88A81F4115AFC68DBB167ABB1823F6F75F23D1182BA8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.