General
- Target 2026-11-11_55edfeacfdec2a94f1d2b6665e3a6682_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 495KB
- Sample261113-pbd27aa12v
- SHA256 0bfd07fb11656c2bd913fc45704cdd3d52454531d28386cd732af4d95ab48516
- MD5 55edfeacfdec2a94f1d2b6665e3a6682
- SHA1 fe6791eefc9e13f7c9ccae22a1f4019a16ba332a
- SHA512 ee79cb1ab5349df034f343cf682b1b9164f62bb2668874f86348f60f693f048b2e13a44d7bd3f4bf002c465f88197136293c9768c532fdd3defb2f57b5259fea
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltb:2pkbi5qjhZ3CmW9lsq+eYuC
- TLSH T1E0B44B12B7C1C492FA741171C88A80F41157FC98D7B157ABB1823F5BB9F23D2582FA8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-11_55edfeacfdec2a94f1d2b6665e3a6682_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-11_55edfeacfdec2a94f1d2b6665e3a6682_amadey_cobalt-strike_darkgate_elex_hellokitty.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-11_55edfeacfdec2a94f1d2b6665e3a6682_amadey_cobalt-strike_darkgate_elex_hellokitty
- Size 495KB
- SHA256 0bfd07fb11656c2bd913fc45704cdd3d52454531d28386cd732af4d95ab48516
- MD5 55edfeacfdec2a94f1d2b6665e3a6682
- SHA1 fe6791eefc9e13f7c9ccae22a1f4019a16ba332a
- SHA512 ee79cb1ab5349df034f343cf682b1b9164f62bb2668874f86348f60f693f048b2e13a44d7bd3f4bf002c465f88197136293c9768c532fdd3defb2f57b5259fea
- SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltb:2pkbi5qjhZ3CmW9lsq+eYuC
- TLSH T1E0B44B12B7C1C492FA741171C88A80F41157FC98D7B157ABB1823F5BB9F23D2582FA8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.