Analysis

  • max time kernel
    149s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    20/10/2026, 16:05

General

  • Target
    2026-10-19_7776d10b6ed9ecb0f393662cbef3f39f_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
  • Size 1.9MB
  • Sample261020-tjrepsts2j
  • SHA256 0336d5e206249513bd2a8a93b9ce39d95e54af353fcbe9cf373066634330fdbb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-19_7776d10b6ed9ecb0f393662cbef3f39f_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-19_7776d10b6ed9ecb0f393662cbef3f39f_akira_cobalt-strike_elex_icedid_njrat_vidar.exe"
    1⤵
    • Drops file in Program Files directory
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:5084
    • C:\Users\Admin\AppData\Local\Temp\2026-10-19_7776d10b6ed9ecb0f393662cbef3f39f_akira_cobalt-strike_elex_icedid_njrat_vidar.exe.exe
      C:\Users\Admin\AppData\Local\Temp/2026-10-19_7776d10b6ed9ecb0f393662cbef3f39f_akira_cobalt-strike_elex_icedid_njrat_vidar.exe.exe
      2⤵
      • Executes dropped EXE
      PID:2836

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AcroLayoutRecognizer.exe

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroLayoutRecognizer\AcroLayoutRecognizer.exe
        • Size 728KB
        • SHA256 38509c0a625663f650a2e29f112b48d7c78d2686ec337972f323a395288c9b37
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LogTransport2.exe

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\LogTransport2.exe
        • Size 1.0MB
        • SHA256 4d9a7915106a66ee9ee467d03bf27aa9011ad2342ce8381eca26ff76c767c542
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AdobeARM.exe

        • Path C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
        • Size 1.8MB
        • SHA256 588928928db6752e0896360c2fa5fe1820e1b0b2fbf6d90bbbc662afe40a6348
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AdobeARMHelper.exe

        • Path C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe
        • Size 1.1MB
        • SHA256 a34f2c28b6d262febace05180c1adaecb60f6a4d5ca0eb33dc1e559d3c6a4314
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AdobeARMHelper.exe.ico

        • Path C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe.ico
        • Size 3KB
        • SHA256 2f33dacaebb8bdf6d2d88550cce349c09b51dfeb4f499796f32bd30e14aab86c
        • MD5 SHA1 SHA512 TLSH

        msinfo32.exe.ico

        • Path C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\msinfo32.exe.ico
        • Size 3KB
        • SHA256 5d7967695bef88a64140c541a09f22b45abe542c2df462d800e72e1d8e121d28
        • MD5 SHA1 SHA512 TLSH

        javaw.exe

        • Path C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_157859\javaw.exe
        • Size 1001KB
        • SHA256 3fb4d5d28d03aba2fa170405c78bfa924e40ae39401d6979bfd3dc69aff566b4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DisabledGoogleUpdate.exe.ico

        • Path C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe.ico
        • Size 3KB
        • SHA256 2e039a7ce5af3783a3d522d27112bfe7a1dac319ed5061de3bef89790d5ad63e
        • MD5 SHA1 SHA512 TLSH

        msedge_proxy.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\msedge_proxy.exe
        • Size 1.8MB
        • SHA256 fdd6f2a07e7110015b3f86b574bb87333aa30d8a56f631624bc117e404a3f7de
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msedgewebview2.exe.ico

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\msedgewebview2.exe.ico
        • Size 3KB
        • SHA256 61197ae03a1910353d202dffcc2271af59a9c26150652fbc6a84806cef420176
        • MD5 SHA1 SHA512 TLSH

        pwahelper.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\pwahelper.exe
        • Size 1.7MB
        • SHA256 c8e6fd9e344d655fa87e22047b8b00672951582354de59a8830fa0b31ed92f14
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msedge.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedge.exe
        • Size 4.6MB
        • SHA256 c80c9a9a174b68778a6c1aff6000aa4bca1828eefd121c0e5c5ae13b3c5ac172
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cookie_exporter.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\cookie_exporter.exe
        • Size 837KB
        • SHA256 6a604571386b604ac74932943b5e696a6984d7d591d169fd01d6172498d7291b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        elevation_service.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\elevation_service.exe
        • Size 2.5MB
        • SHA256 93257bbd0c08520019a6ee8ea22f315d51978dd06209fd75d6f997eeea8640e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        setup.exe

        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Installer\setup.exe
        • Size 7.7MB
        • SHA256 c6f407e457939f376edcb3bc1be1a17548de9fe2a7c5a6398bb6a162ffc81d53
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msedge_proxy.exe

        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge_proxy.exe
        • Size 2.1MB
        • SHA256 7c5a413cb028adfaaab931e559945c59dd58ed312a1392e92e5dac9659bdd620
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msedge_pwa_launcher.exe

        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge_pwa_launcher.exe
        • Size 2.5MB
        • SHA256 40aa22a0209decbff7a6d7cad2bee9f15854451f4a7a6d9a219427e9612a2ec7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msedge_pwa_launcher.exe.ico

        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge_pwa_launcher.exe.ico
        • Size 3KB
        • SHA256 4785d266a2c476e0948100ea80f927d16389f7718b540daf0488457ba01958b0
        • MD5 SHA1 SHA512 TLSH

        notification_helper.exe

        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\notification_helper.exe
        • Size 2.3MB
        • SHA256 7936c25df71ca7abcc7d8df000c4dc90836e03344242824787f6f1f748e23623
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msedge_proxy.exe

        • Path C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe
        • Size 2.1MB
        • SHA256 e3cce3664e091e650cddb8aa120e799c3744de929cc32a1e9166d43f0138e83d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        maintenanceservice.exe

        • Path C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
        • Size 988KB
        • SHA256 5d11f287b09c113bb86e17acb8410d83317d79883ada2f6f6520341d2b2c8b8a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wab.exe.ico

        • Path C:\Program Files (x86)\Windows Mail\wab.exe.ico
        • Size 3KB
        • SHA256 ce19242fbf3efc4fe158fba6ad17e913a57a5fe53166f47dc8e5faa5a9f90a03
        • MD5 SHA1 SHA512 TLSH

        wabmig.exe.ico

        • Path C:\Program Files (x86)\Windows Mail\wabmig.exe.ico
        • Size 3KB
        • SHA256 88c0094fb49858d277e6e56c8c1023bf93356b7d3fc8e037b355d21aa1c7bd34
        • MD5 SHA1 SHA512 TLSH

        wordpad.exe.ico

        • Path C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe.ico
        • Size 3KB
        • SHA256 9948a7a97643b62f3496c08d5c06563d78e1a2eb7955a508cab6ccab402b33fd
        • MD5 SHA1 SHA512 TLSH

        ImagingDevices.exe.ico

        • Path C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe.ico
        • Size 3KB
        • SHA256 c76b2392ae75384d2097bd890c529cc5636350476c9a001ee1a055430c8f1c86
        • MD5 SHA1 SHA512 TLSH

        7z.exe.exe

        • Path C:\Program Files\7-Zip\7z.exe.exe
        • Size 712KB
        • SHA256 503c2f3d098733876c569c5f4841dd3d021c9f5aeee3504d4df2fb0d811dc117
        • MD5 SHA1 SHA512 SSDEEP TLSH

        7zG.exe.ico

        • Path C:\Program Files\7-Zip\7zG.exe.ico
        • Size 3KB
        • SHA256 8cad493433ec34a34ca6f4fd49655aaf7cbb4337752743804db83ea6c050d1fe
        • MD5 SHA1 SHA512 TLSH

        OfficeC2RClient.exe.ico

        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe.ico
        • Size 3KB
        • SHA256 19306f3f899e8bae15a744924f1ebf2ce88624f5dd297e3993645fe8453adaa9
        • MD5 SHA1 SHA512 TLSH

        appvcleaner.exe.ico

        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe.ico
        • Size 3KB
        • SHA256 2a5c5c2bc95c18eded222f0a38752717c1a6ad20e31bcda6472bbba77ed22fe4
        • MD5 SHA1 SHA512 TLSH

        setup.exe.ico

        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe.ico
        • Size 3KB
        • SHA256 3d275500cf3ebda5e878d81dcbbaa53528397ccbe631aae8fae60de1ffefccf7
        • MD5 SHA1 SHA512 TLSH

        ielowutil.exe.ico

        • Path C:\Program Files\Internet Explorer\ielowutil.exe.ico
        • Size 3KB
        • SHA256 dd8074940b2a1e8d0ad513e7c6e2a0d0b11a857893f11dc77387800ca272e970
        • MD5 SHA1 SHA512 TLSH

        javaw.exe.ico

        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe.ico
        • Size 3KB
        • SHA256 6c3d33a5119708abbf19b802f0908183037cd57a6394e45b7b234a76ef4b46c5
        • MD5 SHA1 SHA512 TLSH

        Integrator.exe

        • Path C:\Program Files\Microsoft Office\root\Integration\Integrator.exe
        • Size 7.3MB
        • SHA256 7adc20d395376c810ab964f855f740b0062b72a16250884b0c3be1b2509a45b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PPTICO.EXE.ico

        • Path C:\Program Files\Microsoft Office\root\Office16\PPTICO.EXE.ico
        • Size 3KB
        • SHA256 3b07d1aaa1c9c27082d7811d694aae3d422d5d965a91b2d4b8ecda3a79f760a2
        • MD5 SHA1 SHA512 TLSH

        SKYPESERVER.EXE

        • Path C:\Program Files\Microsoft Office\root\Office16\SkypeSrv\SKYPESERVER.EXE
        • Size 827KB
        • SHA256 ee5af7f275eb2c70ac7b36a835f92d3ee703eedc8bf48db40113a9324855ecc0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        WORDICON.EXE.ico

        • Path C:\Program Files\Microsoft Office\root\Office16\WORDICON.EXE.ico
        • Size 3KB
        • SHA256 5bd706a18e0cf54197df7f1d5239f3e058652bfde372afcab230ee9b95ba14a5
        • MD5 SHA1 SHA512 TLSH

        excelcnv.exe.ico

        • Path C:\Program Files\Microsoft Office\root\Office16\excelcnv.exe.ico
        • Size 3KB
        • SHA256 6454633b8c6a69aad48c3fc556c5e81cb5362db0c449b3f543bddfa41eba8d6b
        • MD5 SHA1 SHA512 TLSH

        MSOICONS.EXE.ico

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOICONS.EXE.ico
        • Size 3KB
        • SHA256 df2cca9b322f9432b3f3aa7b91a12dd5f22fd50e589e3107e066d99bdb071176
        • MD5 SHA1 SHA512 TLSH

        MSOXMLED.EXE.ico

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLED.EXE.ico
        • Size 3KB
        • SHA256 063c8f44d23e1ebbe390ea320eee672c449f47333120b7abbd4a78094c613113
        • MD5 SHA1 SHA512 TLSH

        Common.DBConnection.exe

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Common.DBConnection.exe
        • Size 763KB
        • SHA256 33f606dec9e8a590aa9f0e1bfc9809b8461ddc528811935252a86708441a2ced
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dbcicons.exe.ico

        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\dbcicons.exe.ico
        • Size 3KB
        • SHA256 b2a350ffac5074add67fe974467351777915de5a319be7879ba15d1f6915a092
        • MD5 SHA1 SHA512 TLSH

        joticon.exe.ico

        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\joticon.exe.ico
        • Size 3KB
        • SHA256 f4c419b2d60ebe6dc173b36b108855b1f4db9c28fda291f4d93ac38e6dd24389
        • MD5 SHA1 SHA512 TLSH

        osmclienticon.exe.ico

        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\osmclienticon.exe.ico
        • Size 3KB
        • SHA256 b76444a386ad024bd78ee152f0f6ad2d5dd3b9ed478147014e5d804e7a9e6508
        • MD5 SHA1 SHA512 TLSH

        outicon.exe.ico

        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\outicon.exe.ico
        • Size 3KB
        • SHA256 98d0a0fe25fa36309c0bbe62f04a561a1e02d51a4dc2c8331b9b3c2e47387f5f
        • MD5 SHA1 SHA512 TLSH

        crashreporter.exe

        • Path C:\Program Files\Mozilla Firefox\crashreporter.exe
        • Size 4.1MB
        • SHA256 a16c08dacb57389af9cf5fc1ac63cc6f62d906198ce8f4afbcea787b39633fd0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pingsender.exe

        • Path C:\Program Files\Mozilla Firefox\pingsender.exe
        • Size 799KB
        • SHA256 a1d95d18fb737ce1f705fb06c574c39973115ef21a3b5f3cfe2a50490e5666b6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        helper.exe.ico

        • Path C:\Program Files\Mozilla Firefox\uninstall\helper.exe.ico
        • Size 3KB
        • SHA256 44ae793c391e8578709e181e83cb820caaa10c08844440885d969a6c839b8a2b
        • MD5 SHA1 SHA512 TLSH

        vlc-cache-gen.exe.ico

        • Path C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe.ico
        • Size 3KB
        • SHA256 3b17b29b6c4e39fc36571f8e0795eae6559637529602ae7a37d5f8f6254d0500
        • MD5 SHA1 SHA512 TLSH

        wmpconfig.exe.ico

        • Path C:\Program Files\Windows Media Player\wmpconfig.exe.ico
        • Size 3KB
        • SHA256 a32208cf5c16d7223999e6ecf1c185bc88d519483ff56ad5ca5f2cc00e677307
        • MD5 SHA1 SHA512 TLSH

        integrator.exe

        • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe
        • Size 7.3MB
        • SHA256 e54780f581233d5d93c932a9652d63eaf362c36bed94e2dedf0cf689053d2842
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcredist_x86.exe

        • Path C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
        • Size 1.1MB
        • SHA256 0b36ab0c4f4fc11bdf368463fe6bf8f9f246e1e25c17fc46ec1a792d822b29ff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcredist_x86.exe.ico

        • Path C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe.ico
        • Size 3KB
        • SHA256 6ed1664d7718a68084ea1a4abb1d9621a6ae8da8e19db35cfca13aaa4c05eb33
        • MD5 SHA1 SHA512 TLSH

        VC_redist.x86.exe

        • Path C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe
        • Size 1.3MB
        • SHA256 8b4804d4eafa0d46411d6fbdd6b1dd875d5389f20350fbd8a7497dcd2b8f97e0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        windowsdesktop-runtime-8.0.15-win-x64.exe

        • Path C:\ProgramData\Package Cache\{5625bb48-295c-4113-bc92-d6a69b19b04c}\windowsdesktop-runtime-8.0.15-win-x64.exe
        • Size 1.3MB
        • SHA256 b38db7dd2971310b612c59498fbb63638579b5b1efefedb6992995d04c60c267
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VC_redist.x64.exe

        • Path C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
        • Size 1.3MB
        • SHA256 aab2de06a96697a51c6ff1ae16f7ce4d1398bde1d49f61fab8f6e5a4782f412f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        windowsdesktop-runtime-6.0.27-win-x64.exe

        • Path C:\ProgramData\Package Cache\{d87ae0f4-64a6-4b94-859a-530b9c313c27}\windowsdesktop-runtime-6.0.27-win-x64.exe
        • Size 1.3MB
        • SHA256 f6485f7dc7a2a41adcea9078ac1545ecc3f7ced2c8b2729e5ad1c2d3c2439558
        • MD5 SHA1 SHA512 SSDEEP TLSH

        windowsdesktop-runtime-7.0.16-win-x64.exe

        • Path C:\ProgramData\Package Cache\{ef5af41f-d68c-48f7-bfb0-5055718601fc}\windowsdesktop-runtime-7.0.16-win-x64.exe
        • Size 1.3MB
        • SHA256 73a1ac4384d01e9b5b51f3fb066f20577b2c16c29b1ae1cb68c94345844d7a89
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcredist_x64.exe

        • Path C:\ProgramData\Package Cache\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}\vcredist_x64.exe
        • Size 1.1MB
        • SHA256 811ae33995db851ec44eec4f59759e1d9f874858a73e14e95cbf51fa77572c9f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        FileCoAuth.exe

        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe
        • Size 1.1MB
        • SHA256 6122b3cbfc1c259d259e109d48d765e381461aede52cb51c387f51acc726b1f2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OneDriveSetup.exe

        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\OneDriveSetup.exe
        • Size 27.3MB
        • SHA256 be6694410d1bf5356a123cde7a6b4b5d89d105cebac482078f1ef889cbea2211
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OneDrive.exe.ico

        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe.ico
        • Size 3KB
        • SHA256 3a2d7fd9799178af58fbd08a2fffc56398cbf289c7ddd5c5f0fb2e241395261e
        • MD5 SHA1 SHA512 TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 420f4344e61dcdf00ab1ca7f2263c88faa4b86edcf869fd31ed3377eb0e249c3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 16fd30d13da1a15fd6582b1c8111ed27bbb8973fb892ed64da8a794f65871ca8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 10bdd72732d864b7866dff2aa0c7cb61cf7b48c8006f593770ab3aef9dbfd210
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 ee5a3466d6e793e5ba4f3bfaeedc7284ceef57d088ae0bf5b7a4124761578c1d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 f25a3399429e28589ac0b05a44d926132592b3a306466a6b473950c518b2c98c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 e9fa2a41bef38b093599af661ebbd2b5dbb7385e2d3ce6288ebe0ad4fede372f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 4f8d832bc3d9a5acbbf3d9b0802792180712de9d084bb8c9a64c35e47aef46aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 9b8a6d7019ee2066266a17a821b70a35081589c2971481e90f277ada7b63a1b3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 0db1251d9e1c56849876d0a72319f33b7c2e5dffb8af48dcb6f945249c4dc654
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 6ff080109665ff8d2dde7ff799fcc69b642b1a1bd5206bba57b224521ea54237
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 b95f409f429251edac6c18551042f6c93ab9427b75c776135499b1bffd427a50
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 44dae088839248e6eedffbdae0156e5def7a2c7100e5c7e0ad529d1f17768d12
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 5bfc92ddf560e5548a56514235f033a4406410dab99434c23c0a5a79eee51d87
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 a663d801ee06acf6df6d616b45c2ac990b007d84ab99355c50dc58cd6d9fb8f5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 b4018c99728e244ae0f599aec08db8d9c4157f9770fe5c924e76e5c061ef09b4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 6c87cfd5b26aadd71bc49bd053d0b05bf8378d5ab486e9ba4cf4cbf8859c6467
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 5dbabe32f52bc09aed78c2f2f9b16f58248b843a792128f63cfcd27864db11e1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 4483d9d292ad7e7e5bd5605064a1afdbea5f34961ef2d4010d1154181505274a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 a35ce79f351c1d385d0558109a2d6f8698c585ecfb99f54aaee5e1fe93b2c529
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 389e6bed97c948e7761cd05dead636c3a8f74b1e2e2f14d5529e9adaa00b11aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 f9573c61eaf38725d11ebd096dc7045a7c6e2466fd4d0b98cd854b17c3a39456
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 70e1f8c2aba0bba6943eca59ae63b510b04ba821135c05ea137c3a93a58cfae4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 6b2fa17e09e0f28fb90a2b8b7f71cfd7ba3629013d5ad8cb8db36ecfaa48c523
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 bfd27e2340e23ea6eb8cbf8502f9fcd7a7e55ac6f4e366438c01aa711ef20429
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 1828ade804e76cef282f888da01d029bc270ac6b94b3affdf57ebd83068e0715
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 7f74be5154d445a879a90cd5c54f2f89a9821bd9030c76aa892eb07127b7f2c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 752b95e4f6c4731f098701844ebb59f37df64f2f888fd9813c069505ad94d8b8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 5a8b03e1680aa0251913050fe3d5fc52a3b16842676627babb4d5a44c3f87419
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 591c95747a3bc34269650b4a33d2b7a8cb291a4b840f125962c0e02a68565d9e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 24aa3c9d10590bea0131b41284c359fe4c9b5f815f213d08888e2d7ae4f0e747
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 caa81688e6f1c4a5388227e2d001a6c171147b4de17379460222eed68a92f90f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 4512e2d944d05fcfd95008089cd3585171afae82672c1404eef38d7f5846f098
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 c5e0e4f887f3f6b0c258c5d82faa476c7d88799f5c654b8dcc3ce7105c2a0e5a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 243b5d40d94ab6d2d5f416fd42cbb7a3c442c1d432d70eab98600b802672fc3b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 9c8e93a58f42e6610326afd139b6b38390f79e9ed626823e283c8c222fa63b6c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 3c5284e97bdc00125c30852e455419b091282c9fd8767cbae0717a1d4aef19fc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 4756e845d178fad9d75b7f397182a0774dcc7b7e3061b5f8e64e59f5e62c4722
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 114a2bd87d3c6a33a450bcb1edb10aa4475c37bd19fa2c30486af64f04cc7e5d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 8a1ff0da1f86d2489d74b125be8b321e469d5a54b6cc18b8c956d0e7379137dc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 93ceaa3321eac0fb79c6272904aa5dbbb77bc47658c66eed1018170530dbb9de
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 005b238a3e94ea84d8848672321839ea2491da4d64541cbdbd95902906c70ef9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 b11661690f89614a51c1744e04bf5ed5c05685d26291d32d2921759f3773dfa5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 47ab3e74eb9e0087824e75ce30a48ae7283743bbce12f749d0baa802a837a6cd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 c8fb5e82368d13083914319408347a5dc8ecd466431233892b1c22d07e1faaa1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 6f1f6d3a2294a405df529e5b485930df72ec51ab0152a019dc5b9b9b3c0bfe3a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 53c4a6dd411ce9ce078d834bfbc50bddf1691fc75c8a070ab8dcde86512476ec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 016b272f724ad0228223655d6935df509bc468265f0117d92a1b65b112ebeb4d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 e8849e24ffad97c4c756fc008432350e36eba6148bd0d97e5c25a13f4ef3af68
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 8183d1d4c6e18787d1a9a2d0bf839c07312652d66cb95a12f2e40e918d05a100
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 114a24a0f0d71a314bd510e44e099ff51ae4c2a061f85672e5094daa24f6018a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 e0a347d238df42bd90ce5307eb6f53acc5657d8b20563530c3fc8b8be71f62a3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 3fed087b79e8f2660cc6bdc4ac52d8491875a518afea269a21611f7b992924bc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 c992efa6fcd76d65f14e13d90b97ef72940d8eb8ff0756198b3df5a73891ebc2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 834b538bc6abd8d60e33d352b1f071b57a4e29277fd80132f900c1ef293a58e4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 1b2bf99a584228ecaf3301fa7ffdb2d6a04cf927e8d3112b7dc8d14d69c92f10
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 eb120f989fcec7216d8b117ce2a55ed2b4e749a1ba49721e7d6fe3dfb9fb1c34
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 0e43194a6040398cd952d041d9d74b13d78a441bcf0b921d6aef1639e819ca31
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 d7bf97649821f66ceaa0cab804603a712413af7d45ba63cc4fedf91d13b70c12
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 a8f45606b48c194e93d7720b0e41c2ab365c52b88e358dc858202863b0354147
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 4029867c2060979755599b216f7f0fdc66036fe01f9b307ba81815860481903d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 eddd119323733a84f6aa564c84db58afdaf2bb9ccac90ec1551fe3afc76f01ea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 ccd001a620bf33d9002ebc233ed58deb162fbb74af1949a0e3a4711044af7c9d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        2026-10-19_7776d10b6ed9ecb0f393662cbef3f39f_akira_cobalt-strike_elex_icedid_njrat_vidar.exe.exe

        • Path C:\Users\Admin\AppData\Local\Temp\2026-10-19_7776d10b6ed9ecb0f393662cbef3f39f_akira_cobalt-strike_elex_icedid_njrat_vidar.exe.exe
        • Size 1.9MB
        • SHA256 8a1f4b2b722ec5e542dc901d2fa08eaea7e20b885b204c6f78295fda5ee11625
        • MD5 SHA1 SHA512 SSDEEP TLSH

        2026-10-19_7776d10b6ed9ecb0f393662cbef3f39f_akira_cobalt-strike_elex_icedid_njrat_vidar.exe.exe

        • Path C:\Users\Admin\AppData\Local\Temp\2026-10-19_7776d10b6ed9ecb0f393662cbef3f39f_akira_cobalt-strike_elex_icedid_njrat_vidar.exe.exe
        • Size 1.2MB
        • SHA256 096e49de20292f8b09c02486c329fd4f46853cdf71d63d1e435f2a9b8bd0a70c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/5084-0-0x0000000000400000-0x00000000004D4000-memory.dmp

        memory/5084-1214-0x0000000000400000-0x00000000004D4000-memory.dmp