2026-10-22_bc6d265ad24ae4a1534a42c8ba63bebd_amadey_cobalt-strike_darkgate_elex_hellokitty

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_bc6d265ad24ae4a1534a42c8ba63bebd_amadey_cobalt-strike_darkgate_elex_hellokitty
Size 548KB
Sample261023-2h314set4w
SHA256 c4e17fd75dd6a34566f462b1e79895af5b8ad4dd64be85be3651f5fc1a39fe3d
MD5 bc6d265ad24ae4a1534a42c8ba63bebd
SHA1 5a423583d9f6567e502b9f5bd1c58293ae0fd474
SHA512 cacfb5d1d979d93f1ec2d7ed55f7a44ca24eeda815458780476e06ce2796cfd71a803b8859bcf6d3364ba1682137d6e1fbe55896fef72ae2e08bcd93b2c777fc
SSDEEP 12288:0LTF9jvEZ3CmW9lsq+eYzYrL3zrViys3UiEdYI2d/6iywa3nVeNK6Hx5E+A0o0Jx:YxRvEUmVxeYzYrL3zrViys3UiEdYI2dP
TLSH
T1CDC45C02B790C492F6B402B1C44640F4155BBD98E6F223A7F1867F9FB8B53D2591BBCA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_bc6d265ad24ae4a1534a42c8ba63bebd_amadey_cobalt-strike_darkgate_elex_hellokitty

File Explorer

2026-10-22_bc6d265ad24ae4a1534a42c8ba63bebd_amadey_cobalt-strike_darkgate_elex_hellokitty

.exe 548KB

2026-10-22_bc6d265ad24ae4a1534a42c8ba63bebd_amadey_cobalt-strike_darkgate_elex_hellokitty

IMPHASH ab83d78d83be945667da4961e44446da
SHA256 c4e17fd75dd6a34566f462b1e79895af5b8ad4dd64be85be3651f5fc1a39fe3d
MD5 bc6d265ad24ae4a1534a42c8ba63bebd
SHA1 5a423583d9f6567e502b9f5bd1c58293ae0fd474
SHA512 cacfb5d1d979d93f1ec2d7ed55f7a44ca24eeda815458780476e06ce2796cfd71a803b8859bcf6d3364ba1682137d6e1fbe55896fef72ae2e08bcd93b2c777fc
SSDEEP 12288:0LTF9jvEZ3CmW9lsq+eYzYrL3zrViys3UiEdYI2d/6iywa3nVeNK6Hx5E+A0o0Jx:YxRvEUmVxeYzYrL3zrViys3UiEdYI2dP
TLSH
T1CDC45C02B790C492F6B402B1C44640F4155BBD98E6F223A7F1867F9FB8B53D2591BBCA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25759

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnterCriticalSection FindNextFileW GetCurrentProcess WriteFile TerminateProcess RemoveDirectoryW GetModuleFileNameW SetThreadUILanguage InitializeCriticalSectionAndSpinCount LeaveCriticalSection GetTempPathW FindClose CreateFileW MultiByteToWideChar GetLastError DeleteFileW CloseHandle CreateThread GetProcAddress SetFilePointerEx GetFileSize DeleteCriticalSection GetModuleHandleW WideCharToMultiByte DecodePointer HeapReAlloc HeapSize FlushFileBuffers GetConsoleOutputCP GetStringTypeW GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo WriteConsoleW GetOEMCP GetACP IsValidCodePage FindFirstFileExW SetThreadLocale FindFirstFileW ReadFile SetStdHandle SetEvent ResetEvent WaitForSingleObjectEx CreateEventW UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind RaiseException SetLastError EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetFileType ExitProcess GetModuleHandleExW GetStdHandle GetConsoleMode HeapAlloc HeapFree LCMapStringW

user32

GetMessageW DefWindowProcW MessageBoxExW CreateWindowExW SendMessageW GetSystemMetrics RegisterClassExW ShowWindow DispatchMessageW TranslateMessage LoadIconW PostQuitMessage EnableWindow DestroyWindow

gdi32

CreateSolidBrush CreateFontW

advapi32

RegDeleteKeyW

shell32

ShellExecuteW SHGetSpecialFolderPathW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_bc6d265ad24ae4a1534a42c8ba63bebd_amadey_cobalt-strike_darkgate_elex_hellokitty

kernel32

user32

gdi32

advapi32

shell32

generic