Analysis

  • max time kernel
    148s
  • max time network
    124s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    03/10/2026, 12:51

General

  • Target
    2026-10-02_4fd319d74241d8e16b1ce6ede10d56e5_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
  • Size 3.9MB
  • Sample261003-p3qv3ayflg
  • SHA256 45b430d7146211f4ed2d5c129f86966cdb9e2c393e2feea9adba5056a848e2d9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Enumerates connected drives 3 TTPs 1 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-02_4fd319d74241d8e16b1ce6ede10d56e5_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-02_4fd319d74241d8e16b1ce6ede10d56e5_akira_cobalt-strike_elex_icedid_njrat_vidar.exe"
    1⤵
    • Enumerates connected drives
    • Drops file in Program Files directory
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:1084
    • C:\Users\Admin\AppData\Local\Temp\2026-10-02_4fd319d74241d8e16b1ce6ede10d56e5_akira_cobalt-strike_elex_icedid_njrat_vidar.exe.exe
      C:\Users\Admin\AppData\Local\Temp/2026-10-02_4fd319d74241d8e16b1ce6ede10d56e5_akira_cobalt-strike_elex_icedid_njrat_vidar.exe.exe
      2⤵
      • Executes dropped EXE
      PID:696

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ADelRCP.exe

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\ADelRCP.exe
        • Size 859KB
        • SHA256 323725fb59b3b6fae65b0c13b978d45172bc2c9a3d0d4b4b866277258043b9bf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wow_helper.exe

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\wow_helper.exe
        • Size 831KB
        • SHA256 ea4fc741766695aa01c680cf4f4961ce3aa65694545a51c7cb23886c162217cc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AdobeARMHelper.exe.ico

        • Path C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe.ico
        • Size 3KB
        • SHA256 2f33dacaebb8bdf6d2d88550cce349c09b51dfeb4f499796f32bd30e14aab86c
        • MD5 SHA1 SHA512 TLSH

        jaureg.exe

        • Path C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe
        • Size 1.2MB
        • SHA256 4e51f81e0d3e67496e8664444d52dbe23797f1b0401720814678235743fcd1e1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msinfo32.exe.ico

        • Path C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\msinfo32.exe.ico
        • Size 3KB
        • SHA256 5d7967695bef88a64140c541a09f22b45abe542c2df462d800e72e1d8e121d28
        • MD5 SHA1 SHA512 TLSH

        DisabledGoogleUpdate.exe.ico

        • Path C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe.ico
        • Size 3KB
        • SHA256 2e039a7ce5af3783a3d522d27112bfe7a1dac319ed5061de3bef89790d5ad63e
        • MD5 SHA1 SHA512 TLSH

        ie_to_edge_stub.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\BHO\ie_to_edge_stub.exe
        • Size 1.2MB
        • SHA256 4623bfad19fe8db53a734b1b44729967911410961a8bd702b7a0038ea518b547
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msedgewebview2.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\msedgewebview2.exe
        • Size 4.1MB
        • SHA256 55e9a59d9e2c0aa478c927abef59af3c1202b996bb00dd907cc51b51f4c8850a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msedgewebview2.exe.ico

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\msedgewebview2.exe.ico
        • Size 3KB
        • SHA256 61197ae03a1910353d202dffcc2271af59a9c26150652fbc6a84806cef420176
        • MD5 SHA1 SHA512 TLSH

        pwahelper.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\pwahelper.exe
        • Size 1.8MB
        • SHA256 d69ccdea225591975adf67f08d433eb002c98a4c8fc69ab2bbf6049163ef8c0f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ie_to_edge_stub.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\BHO\ie_to_edge_stub.exe
        • Size 1.2MB
        • SHA256 307d4868dae7fcb6476bf119078bb34fba6dfbc1e43190fd8630703b24f7f432
        • MD5 SHA1 SHA512 SSDEEP TLSH

        setup.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Installer\setup.exe
        • Size 7.7MB
        • SHA256 28c29995e1067585500c52f14560130ab84d55d9d82dbdae35b71667a27f7100
        • MD5 SHA1 SHA512 SSDEEP TLSH

        elevation_service.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\elevation_service.exe
        • Size 2.9MB
        • SHA256 4229473ae6f45e6b1a4883bc0d9e6c4a748b30bb1c15d2805497dd4c20aea024
        • MD5 SHA1 SHA512 SSDEEP TLSH

        identity_helper.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\identity_helper.exe
        • Size 2.1MB
        • SHA256 88a98f89d2a798a5d8d999eefe4118c287f6c617f3747cc99a240cfd9c93ce07
        • MD5 SHA1 SHA512 SSDEEP TLSH

        notification_helper.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\notification_helper.exe
        • Size 2.3MB
        • SHA256 dfdd0c3f0efe6d75783b8c63f8bb47dd5f77bf570cc398c5da3820ce61a36b0b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        setup.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Installer\setup.exe
        • Size 7.5MB
        • SHA256 69945eb1eff276550dad47d8bc08cbc81b0b00663eb487bee5d8a598510c93d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cookie_exporter.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\cookie_exporter.exe
        • Size 840KB
        • SHA256 557e2c1a8a61d7f2145a6f3bdeeed256ed6a8dbafcacedbd9814bc11c3404861
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msedge_proxy.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedge_proxy.exe
        • Size 1.9MB
        • SHA256 7a3362d5a34b7205c1327750b1b249849739c103891b204de12046ece7af9f58
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msedge.exe

        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge.exe
        • Size 4.6MB
        • SHA256 9ae8e95e8c02c6ac4cff3af9464a8b4d86e0f63c31c57cf05213e0b4264c6522
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msedge.exe.ico

        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge.exe.ico
        • Size 3KB
        • SHA256 4785d266a2c476e0948100ea80f927d16389f7718b540daf0488457ba01958b0
        • MD5 SHA1 SHA512 TLSH

        msedge_pwa_launcher.exe

        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge_pwa_launcher.exe
        • Size 2.5MB
        • SHA256 c6fddfd2b6c44a4e46a737e5cf75750a6da1b0c410deb3c88a43f1dfa1cbcf2d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msedgewebview2.exe

        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedgewebview2.exe
        • Size 4.1MB
        • SHA256 03f2c86fe44cd8344eb39d2ad717ab41f92849741f4a94b9687ad1282d82e989
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pwahelper.exe

        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\pwahelper.exe
        • Size 2.1MB
        • SHA256 69634393e736cd2a2403944e2be77663e244df92bdcadca1fbeb2a4102718ebc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wab.exe.ico

        • Path C:\Program Files (x86)\Windows Mail\wab.exe.ico
        • Size 3KB
        • SHA256 ce19242fbf3efc4fe158fba6ad17e913a57a5fe53166f47dc8e5faa5a9f90a03
        • MD5 SHA1 SHA512 TLSH

        wabmig.exe.ico

        • Path C:\Program Files (x86)\Windows Mail\wabmig.exe.ico
        • Size 3KB
        • SHA256 88c0094fb49858d277e6e56c8c1023bf93356b7d3fc8e037b355d21aa1c7bd34
        • MD5 SHA1 SHA512 TLSH

        ImagingDevices.exe.ico

        • Path C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe.ico
        • Size 3KB
        • SHA256 c76b2392ae75384d2097bd890c529cc5636350476c9a001ee1a055430c8f1c86
        • MD5 SHA1 SHA512 TLSH

        7z.exe.exe

        • Path C:\Program Files\7-Zip\7z.exe.exe
        • Size 720KB
        • SHA256 3457f9c2759061da82071b4f93445e26304e119e798d27746a03f36cbdda2c24
        • MD5 SHA1 SHA512 SSDEEP TLSH

        7zG.exe.ico

        • Path C:\Program Files\7-Zip\7zG.exe.ico
        • Size 3KB
        • SHA256 8cad493433ec34a34ca6f4fd49655aaf7cbb4337752743804db83ea6c050d1fe
        • MD5 SHA1 SHA512 TLSH

        OfficeC2RClient.exe.ico

        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe.ico
        • Size 3KB
        • SHA256 19306f3f899e8bae15a744924f1ebf2ce88624f5dd297e3993645fe8453adaa9
        • MD5 SHA1 SHA512 TLSH

        appvcleaner.exe.ico

        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe.ico
        • Size 3KB
        • SHA256 463b6e99198762de39ea3c9156504527673355f452c17063d0fcc34caa3cfded
        • MD5 SHA1 SHA512 TLSH

        setup.exe.ico

        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe.ico
        • Size 3KB
        • SHA256 3d275500cf3ebda5e878d81dcbbaa53528397ccbe631aae8fae60de1ffefccf7
        • MD5 SHA1 SHA512 TLSH

        ielowutil.exe.ico

        • Path C:\Program Files\Internet Explorer\ielowutil.exe.ico
        • Size 3KB
        • SHA256 dd8074940b2a1e8d0ad513e7c6e2a0d0b11a857893f11dc77387800ca272e970
        • MD5 SHA1 SHA512 TLSH

        javaw.exe.ico

        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe.ico
        • Size 3KB
        • SHA256 6c3d33a5119708abbf19b802f0908183037cd57a6394e45b7b234a76ef4b46c5
        • MD5 SHA1 SHA512 TLSH

        CNFNOT32.EXE

        • Path C:\Program Files\Microsoft Office\root\Office16\CNFNOT32.EXE
        • Size 966KB
        • SHA256 0adc4308424650c7fe03c8bfcc5af09e1bf5e436f8ceca85e13173de417c9d5d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        IEContentService.exe

        • Path C:\Program Files\Microsoft Office\root\Office16\IEContentService.exe
        • Size 1.1MB
        • SHA256 e8def850ef9d9c156002b55e23956458d0b28e23eeb2fbe98d1f4330919061f5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        NAMECONTROLSERVER.EXE

        • Path C:\Program Files\Microsoft Office\root\Office16\NAMECONTROLSERVER.EXE
        • Size 866KB
        • SHA256 500fb3e1b848c9e5e74a82b5b93e32f4fda8a57310a3494de0a2cbacb7aac223
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PPTICO.EXE.ico

        • Path C:\Program Files\Microsoft Office\root\Office16\PPTICO.EXE.ico
        • Size 3KB
        • SHA256 3b07d1aaa1c9c27082d7811d694aae3d422d5d965a91b2d4b8ecda3a79f760a2
        • MD5 SHA1 SHA512 TLSH

        WORDICON.EXE.ico

        • Path C:\Program Files\Microsoft Office\root\Office16\WORDICON.EXE.ico
        • Size 3KB
        • SHA256 5bd706a18e0cf54197df7f1d5239f3e058652bfde372afcab230ee9b95ba14a5
        • MD5 SHA1 SHA512 TLSH

        excelcnv.exe.ico

        • Path C:\Program Files\Microsoft Office\root\Office16\excelcnv.exe.ico
        • Size 3KB
        • SHA256 6454633b8c6a69aad48c3fc556c5e81cb5362db0c449b3f543bddfa41eba8d6b
        • MD5 SHA1 SHA512 TLSH

        FLTLDR.EXE

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\FLTLDR.EXE
        • Size 1.2MB
        • SHA256 6332931612030ef2fe53a4e56b21eadc831882379d6fc4948d597b3970bb3020
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MSOICONS.EXE.ico

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOICONS.EXE.ico
        • Size 3KB
        • SHA256 df2cca9b322f9432b3f3aa7b91a12dd5f22fd50e589e3107e066d99bdb071176
        • MD5 SHA1 SHA512 TLSH

        MSOXMLED.EXE.ico

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLED.EXE.ico
        • Size 3KB
        • SHA256 063c8f44d23e1ebbe390ea320eee672c449f47333120b7abbd4a78094c613113
        • MD5 SHA1 SHA512 TLSH

        DATABASECOMPARE.EXE

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\DATABASECOMPARE.EXE
        • Size 914KB
        • SHA256 fdcd18dcfe5d357512ad80bb38fee335ce63ed59dc21414640a10e01ea5fcb37
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dbcicons.exe.ico

        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\dbcicons.exe.ico
        • Size 3KB
        • SHA256 b2a350ffac5074add67fe974467351777915de5a319be7879ba15d1f6915a092
        • MD5 SHA1 SHA512 TLSH

        joticon.exe.ico

        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\joticon.exe.ico
        • Size 3KB
        • SHA256 f4c419b2d60ebe6dc173b36b108855b1f4db9c28fda291f4d93ac38e6dd24389
        • MD5 SHA1 SHA512 TLSH

        osmclienticon.exe.ico

        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\osmclienticon.exe.ico
        • Size 3KB
        • SHA256 b76444a386ad024bd78ee152f0f6ad2d5dd3b9ed478147014e5d804e7a9e6508
        • MD5 SHA1 SHA512 TLSH

        outicon.exe.ico

        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\outicon.exe.ico
        • Size 3KB
        • SHA256 98d0a0fe25fa36309c0bbe62f04a561a1e02d51a4dc2c8331b9b3c2e47387f5f
        • MD5 SHA1 SHA512 TLSH

        helper.exe.ico

        • Path C:\Program Files\Mozilla Firefox\uninstall\helper.exe.ico
        • Size 3KB
        • SHA256 44ae793c391e8578709e181e83cb820caaa10c08844440885d969a6c839b8a2b
        • MD5 SHA1 SHA512 TLSH

        updater.exe

        • Path C:\Program Files\Mozilla Firefox\updater.exe
        • Size 1.2MB
        • SHA256 2c5448a820345ebe543e25bd6a0ba271539923be9809661e95290434347d1d75
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vlc-cache-gen.exe.ico

        • Path C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe.ico
        • Size 3KB
        • SHA256 3b17b29b6c4e39fc36571f8e0795eae6559637529602ae7a37d5f8f6254d0500
        • MD5 SHA1 SHA512 TLSH

        MpCopyAccelerator.exe.ico

        • Path C:\Program Files\Windows Defender\MpCopyAccelerator.exe.ico
        • Size 3KB
        • SHA256 02221d573edefa486ba8fe5aee3c8a10c8c7e3188914c0f22df06bb1338db790
        • MD5 SHA1 SHA512 TLSH

        MpDlpCmd.exe.ico

        • Path C:\Program Files\Windows Defender\MpDlpCmd.exe.ico
        • Size 3KB
        • SHA256 9e3f1f8e5166514df44b02a1e0bf7474708dafba161e263cff087af62ba89ae5
        • MD5 SHA1 SHA512 TLSH

        wmpconfig.exe.ico

        • Path C:\Program Files\Windows Media Player\wmpconfig.exe.ico
        • Size 3KB
        • SHA256 a32208cf5c16d7223999e6ecf1c185bc88d519483ff56ad5ca5f2cc00e677307
        • MD5 SHA1 SHA512 TLSH

        integrator.exe

        • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe
        • Size 7.3MB
        • SHA256 1c6cf87f5e71e65263180ad5dd66480ee5261e18c74ce247d591ae52b379dfbd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcredist_x86.exe

        • Path C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
        • Size 1.1MB
        • SHA256 e8aa914327438b6de92abdcffdb9466e80f760fab76d1dd4114ca68a45a937c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcredist_x86.exe.ico

        • Path C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe.ico
        • Size 3KB
        • SHA256 6ed1664d7718a68084ea1a4abb1d9621a6ae8da8e19db35cfca13aaa4c05eb33
        • MD5 SHA1 SHA512 TLSH

        VC_redist.x86.exe

        • Path C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe
        • Size 1.3MB
        • SHA256 939e526f75ae1936aa62e07ab8716ec5711e19b786b042c07be4320d0c3e9c2e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VC_redist.x64.exe

        • Path C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
        • Size 1.3MB
        • SHA256 62e70ba22f8d2a31b0c71dbfbeb4c3706c90321fad003133d5558e991b2dd791
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcredist_x64.exe

        • Path C:\ProgramData\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe
        • Size 1.1MB
        • SHA256 9f3d8f31737f5d2f3bdb06fbaf3104968750c55b6f1ed4056da2e19f67b85690
        • MD5 SHA1 SHA512 SSDEEP TLSH

        windowsdesktop-runtime-7.0.16-win-x64.exe

        • Path C:\ProgramData\Package Cache\{ef5af41f-d68c-48f7-bfb0-5055718601fc}\windowsdesktop-runtime-7.0.16-win-x64.exe
        • Size 1.3MB
        • SHA256 ad570ce1796a612c6d8e6ec3f02777f80bf88e38371a04633d18f29a0403afbd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OneDrive.exe.ico

        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe.ico
        • Size 3KB
        • SHA256 3a2d7fd9799178af58fbd08a2fffc56398cbf289c7ddd5c5f0fb2e241395261e
        • MD5 SHA1 SHA512 TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 761d7813965587936b45880b310a86526de7ffec75286a43438db3c9095562a4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 3e6adf016d6d50033f6cc3df974c6ce5ea711d45d2a9cff1fb4b29cf8055fa21
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 be1d8a80e861d76f7ba704429862c53cd07e016b8699f7113d965d3d3156d5c6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 9d8a09085761f96447869ea14a60a1410ff7df458ad8b52318e5c09849781dcd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 fe8741bf2a77531dc6e4c09609cd01ecfcb0a88f0ce36ca52baa8fa8df411208
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 95874196ea7f24f6f2f3744bde3429f3bed6fe8ea16893e3f7c9713cbdf393a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 efc1472dfceb1d81e6797771adee02c3316b81a42b99fa18db01df99d0307c7b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 7e6924f62fb63eff2bd67b6303031406db96e476a8d4a5f01cef020302a7ee67
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 6aab5c51196d76d63955a07f389aa016ada371226b5de5452d88888ee2c1b791
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 e55809b922eff5b695e890b9d8337ceea3ad4b45fedb0dd4ea1144052a6e3fe1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 2cf3760e637885a2207828ac5150081167d1520598a2b4e437010b2f5c50ed9b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 d4b9f15da66691e394cbd5ee61be6699246b67ae303d348d9d5209fa6a5b3825
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 e7ffb082f8c3db15a504077152673afc80c4d765752cb32a8cd674b39a0b0041
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 3056e77ab2e30e1d2733b7a412a1c869a519401d75b345743f7b5381de558df8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 c634b6d4b28cb85283f809253189c000e629f00b8471ee8b8de85b350b99e1ed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 61743e7767d3ce5dc4a9f3e88985bfab7feebdaad08077ef2211a3790434d93d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 4ab88579243fbdd3ee88ed392523cd5a6c46757cdea6eebe599b23186319a996
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 16ec92d99866858343f70f6e56e5b4ec39e01245872e928dcfc33f4b0f2d8ba0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 99c9cf39b62c14b43800d0b589cfd286a95aef7c5bc89069894b40311dd0abf2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 3c5859f673dc0713e49e91e541b1fdd79fbb0b0a0b428e3da6be5fa87b797726
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 7e477dd880d40d7a4a14d1559f9c8f194b9aa91af4f123a34aa884c72ae4015b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 12c3801a3b7e6a5f77653f516216e6c2824f27eb3249526be25240db6ac4c38f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 73eb1c20826d40b43c691619f5ae3b02865bc96852c85ebb9dcab9b8125578ee
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 f32b276336ac19f52a2c4452f838259c9bbadebe8cd022dc24aa61ca84380d54
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 75f4dde75eef822c20583b8b890f9126ff996e727fb75d2b2d3f079710957025
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 379858a99dfcd86e7ebfa6d638c337b022f809b0c4c09f50d09191875269c4fe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 6858ccb220d2cac81cd240e7a640120d958640a84157891fa61b8d14037901d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 b797f330f13fbafc6880bee5e2b19ecc37dedf3198e5274e8963cc4311ff18d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 7960abf0bdf020b7d35c9d0c5b552cd501a684b0531a5f5dd39eb613590ccc44
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 b17d17f8f7555cdc5d9ac4fd54ba74f084b8440632019054e1d8b8ae62ea66bb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 0d6cb7a8beee051a2e6fb724ff27fcf40aaa28685c01625b4b8d4af0de0430d5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 a3a6850c84d14069c22dbe3ff747022e08dd2e6d243370f806000130f571cdea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 7ab20854abd72bf97a2da58c3bae8e53b67a2119f9e9c6a8030f766b0677ad2e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 3a225797a1c0c45f20eece4442f2e7ee3cbd41bee091a26a834f75292bf4584b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 d0ad37aa2fe4a453a8a7196ca5083fe6218065d4a6eedc0b9104600a13803500
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 3180f740751831dd46315ac4c44b6042472017084d1e884c9602df3643ca124f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 8a3f7da965f9bdff9842dc8891944ea7835b92062a540c4ca7999784f5256e0d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 e7003b2409305a835fdb2db4256ddd7063d7c1a6235f476175064e82cf01c0d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 7018e46b466f46d2f986136f130c824a69196da7abe3070cdb277a337a32a27a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 fab681d774379b29e54b2e5d2c0a5041ad5c0f090fa0b46907b272bc297bb16e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        2026-10-02_4fd319d74241d8e16b1ce6ede10d56e5_akira_cobalt-strike_elex_icedid_njrat_vidar.exe.exe

        • Path C:\Users\Admin\AppData\Local\Temp\2026-10-02_4fd319d74241d8e16b1ce6ede10d56e5_akira_cobalt-strike_elex_icedid_njrat_vidar.exe.exe
        • Size 3.2MB
        • SHA256 110269e0ddc22567f5f4fb0c3a126bc1011c87167817df0a005c81cc73ce1072
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/1084-1002-0x0000000000400000-0x00000000004D6000-memory.dmp

        memory/1084-0-0x0000000000400000-0x00000000004D6000-memory.dmp