Analysis

  • max time kernel
    148s
  • max time network
    125s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    20/10/2026, 16:05

General

  • Target
    2026-10-19_7776d10b6ed9ecb0f393662cbef3f39f_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
  • Size 1.9MB
  • Sample261020-tjrepsts2j
  • SHA256 0336d5e206249513bd2a8a93b9ce39d95e54af353fcbe9cf373066634330fdbb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-19_7776d10b6ed9ecb0f393662cbef3f39f_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-19_7776d10b6ed9ecb0f393662cbef3f39f_akira_cobalt-strike_elex_icedid_njrat_vidar.exe"
    1⤵
    • Drops file in Program Files directory
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:5504
    • C:\Users\Admin\AppData\Local\Temp\2026-10-19_7776d10b6ed9ecb0f393662cbef3f39f_akira_cobalt-strike_elex_icedid_njrat_vidar.exe.exe
      C:\Users\Admin\AppData\Local\Temp/2026-10-19_7776d10b6ed9ecb0f393662cbef3f39f_akira_cobalt-strike_elex_icedid_njrat_vidar.exe.exe
      2⤵
      • Executes dropped EXE
      PID:2608

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AcroTextExtractor.exe

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroTextExtractor.exe
        • Size 762KB
        • SHA256 684dcf147dc1b532945466db93ffcff06fcc251fe9559a8d8f4abbae1bcddab0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AdobeARMHelper.exe.ico

        • Path C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe.ico
        • Size 3KB
        • SHA256 2f33dacaebb8bdf6d2d88550cce349c09b51dfeb4f499796f32bd30e14aab86c
        • MD5 SHA1 SHA512 TLSH

        msinfo32.exe.ico

        • Path C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\msinfo32.exe.ico
        • Size 3KB
        • SHA256 5d7967695bef88a64140c541a09f22b45abe542c2df462d800e72e1d8e121d28
        • MD5 SHA1 SHA512 TLSH

        DisabledGoogleUpdate.exe

        • Path C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe
        • Size 6.4MB
        • SHA256 01ba0b13a1efe2c05c7f6fedd032c7d07f2be42aaad380cd2a2e304c61497359
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DisabledGoogleUpdate.exe.ico

        • Path C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe.ico
        • Size 3KB
        • SHA256 2e039a7ce5af3783a3d522d27112bfe7a1dac319ed5061de3bef89790d5ad63e
        • MD5 SHA1 SHA512 TLSH

        ie_to_edge_stub.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\BHO\ie_to_edge_stub.exe
        • Size 1.2MB
        • SHA256 06107a326884dee2bfdb33cd9efc77c70a5f130bf33910d419b6cdc5d3afa079
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msedgewebview2.exe.ico

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\msedgewebview2.exe.ico
        • Size 3KB
        • SHA256 61197ae03a1910353d202dffcc2271af59a9c26150652fbc6a84806cef420176
        • MD5 SHA1 SHA512 TLSH

        setup.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Installer\setup.exe
        • Size 7.7MB
        • SHA256 d3918465ccf37a6326d65c176cde0eecfb27a0f766efb166782a205a72146134
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msedgewebview2.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedgewebview2.exe
        • Size 4.1MB
        • SHA256 47d7e33a98ef5e44822198e517539862062dcb2235d436575802577524071893
        • MD5 SHA1 SHA512 SSDEEP TLSH

        notification_helper.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\notification_helper.exe
        • Size 2.3MB
        • SHA256 ed7af9f9ead326bab544f9c9f584064e175f5d361aed40d28e795dd33e879237
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MicrosoftEdgeUpdateComRegisterShell64.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.185.27\MicrosoftEdgeUpdateComRegisterShell64.exe
        • Size 932KB
        • SHA256 4d09c4382986abe53ecc1f4cf65f74378aaa22fc6eab3940ccd3baab3b056f4f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MicrosoftEdgeUpdateComRegisterShell64.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeUpdate_disable\1.3.195.65\MicrosoftEdgeUpdateComRegisterShell64.exe
        • Size 931KB
        • SHA256 39ac8ca34693af9d196cf249634c73dbdd65fca80ac435354096087633015f76
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MicrosoftEdgeUpdateSetup.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeUpdate_disable\1.3.195.65\MicrosoftEdgeUpdateSetup.exe
        • Size 2.3MB
        • SHA256 e345758ee2b7f71efd913b317f3136c2853d2a734fff37822891deb015cfba60
        • MD5 SHA1 SHA512 SSDEEP TLSH

        notification_click_helper.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\notification_click_helper.exe
        • Size 2.1MB
        • SHA256 04b8d93f331058adb4680d20f7513fe6f30091f429875e275ebeaa029d1e78ea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        notification_helper.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\notification_helper.exe
        • Size 2.1MB
        • SHA256 03c73e04cbfef883281dc823aabf4cd8c400c3d6a79122a22c416d303dbc8497
        • MD5 SHA1 SHA512 SSDEEP TLSH

        identity_helper.exe

        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        • Size 2.1MB
        • SHA256 52f21f2755f8e6fc0a9c006b00d2d21dad43ae9730566c80264aa5fcfbf960d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msedge.exe.ico

        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge.exe.ico
        • Size 3KB
        • SHA256 4785d266a2c476e0948100ea80f927d16389f7718b540daf0488457ba01958b0
        • MD5 SHA1 SHA512 TLSH

        msedge_proxy.exe

        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge_proxy.exe
        • Size 2.1MB
        • SHA256 3c8676f4a30cf71c218b79619b208a3b1d21e9cfd500bce7b93e2eca81162358
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Uninstall.exe

        • Path C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe
        • Size 816KB
        • SHA256 70145713a19476f406d79f70e4e24e3bd8b238b44412eb2abee86f242c0b6e3a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wab.exe.ico

        • Path C:\Program Files (x86)\Windows Mail\wab.exe.ico
        • Size 3KB
        • SHA256 ce19242fbf3efc4fe158fba6ad17e913a57a5fe53166f47dc8e5faa5a9f90a03
        • MD5 SHA1 SHA512 TLSH

        wabmig.exe.ico

        • Path C:\Program Files (x86)\Windows Mail\wabmig.exe.ico
        • Size 3KB
        • SHA256 88c0094fb49858d277e6e56c8c1023bf93356b7d3fc8e037b355d21aa1c7bd34
        • MD5 SHA1 SHA512 TLSH

        ImagingDevices.exe.ico

        • Path C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe.ico
        • Size 3KB
        • SHA256 c76b2392ae75384d2097bd890c529cc5636350476c9a001ee1a055430c8f1c86
        • MD5 SHA1 SHA512 TLSH

        7z.exe.ico

        • Path C:\Program Files\7-Zip\7z.exe.ico
        • Size 3KB
        • SHA256 463b6e99198762de39ea3c9156504527673355f452c17063d0fcc34caa3cfded
        • MD5 SHA1 SHA512 TLSH

        7zG.exe.ico

        • Path C:\Program Files\7-Zip\7zG.exe.ico
        • Size 3KB
        • SHA256 8cad493433ec34a34ca6f4fd49655aaf7cbb4337752743804db83ea6c050d1fe
        • MD5 SHA1 SHA512 TLSH

        OfficeC2RClient.exe.ico

        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe.ico
        • Size 3KB
        • SHA256 19306f3f899e8bae15a744924f1ebf2ce88624f5dd297e3993645fe8453adaa9
        • MD5 SHA1 SHA512 TLSH

        setup.exe.ico

        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe.ico
        • Size 3KB
        • SHA256 3d275500cf3ebda5e878d81dcbbaa53528397ccbe631aae8fae60de1ffefccf7
        • MD5 SHA1 SHA512 TLSH

        ielowutil.exe.ico

        • Path C:\Program Files\Internet Explorer\ielowutil.exe.ico
        • Size 3KB
        • SHA256 dd8074940b2a1e8d0ad513e7c6e2a0d0b11a857893f11dc77387800ca272e970
        • MD5 SHA1 SHA512 TLSH

        javaw.exe.ico

        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe.ico
        • Size 3KB
        • SHA256 6c3d33a5119708abbf19b802f0908183037cd57a6394e45b7b234a76ef4b46c5
        • MD5 SHA1 SHA512 TLSH

        CLVIEW.EXE

        • Path C:\Program Files\Microsoft Office\root\Office16\CLVIEW.EXE
        • Size 1.2MB
        • SHA256 23cd87e024c49991ace56747977ba78ca206321616a41f2f3322fd7eb4ff2f73
        • MD5 SHA1 SHA512 SSDEEP TLSH

        GRAPH.EXE

        • Path C:\Program Files\Microsoft Office\root\Office16\GRAPH.EXE
        • Size 6.1MB
        • SHA256 fbf5939d79925de916c5077b2135296c666172ef614a6d570d6c36236c1d6bd2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PPTICO.EXE.ico

        • Path C:\Program Files\Microsoft Office\root\Office16\PPTICO.EXE.ico
        • Size 3KB
        • SHA256 3b07d1aaa1c9c27082d7811d694aae3d422d5d965a91b2d4b8ecda3a79f760a2
        • MD5 SHA1 SHA512 TLSH

        WORDICON.EXE.ico

        • Path C:\Program Files\Microsoft Office\root\Office16\WORDICON.EXE.ico
        • Size 3KB
        • SHA256 5bd706a18e0cf54197df7f1d5239f3e058652bfde372afcab230ee9b95ba14a5
        • MD5 SHA1 SHA512 TLSH

        excelcnv.exe.ico

        • Path C:\Program Files\Microsoft Office\root\Office16\excelcnv.exe.ico
        • Size 3KB
        • SHA256 6454633b8c6a69aad48c3fc556c5e81cb5362db0c449b3f543bddfa41eba8d6b
        • MD5 SHA1 SHA512 TLSH

        DWTRIG20.EXE

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\DW\DWTRIG20.EXE
        • Size 1.0MB
        • SHA256 892b03984315514303202095a47beef79d4a6dc7be507a408db6c1d9e8394021
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MSOICONS.EXE.ico

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOICONS.EXE.ico
        • Size 3KB
        • SHA256 df2cca9b322f9432b3f3aa7b91a12dd5f22fd50e589e3107e066d99bdb071176
        • MD5 SHA1 SHA512 TLSH

        MSOXMLED.EXE.ico

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLED.EXE.ico
        • Size 3KB
        • SHA256 063c8f44d23e1ebbe390ea320eee672c449f47333120b7abbd4a78094c613113
        • MD5 SHA1 SHA512 TLSH

        Common.ShowHelp.exe

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Common.ShowHelp.exe
        • Size 754KB
        • SHA256 41a04399a1b6fa1c1b0fc15410048603493c23e1cb4afdb215693931fa4f9f97
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dbcicons.exe.ico

        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\dbcicons.exe.ico
        • Size 3KB
        • SHA256 b2a350ffac5074add67fe974467351777915de5a319be7879ba15d1f6915a092
        • MD5 SHA1 SHA512 TLSH

        joticon.exe.ico

        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\joticon.exe.ico
        • Size 3KB
        • SHA256 f4c419b2d60ebe6dc173b36b108855b1f4db9c28fda291f4d93ac38e6dd24389
        • MD5 SHA1 SHA512 TLSH

        osmclienticon.exe.ico

        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\osmclienticon.exe.ico
        • Size 3KB
        • SHA256 b76444a386ad024bd78ee152f0f6ad2d5dd3b9ed478147014e5d804e7a9e6508
        • MD5 SHA1 SHA512 TLSH

        outicon.exe.ico

        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\outicon.exe.ico
        • Size 3KB
        • SHA256 98d0a0fe25fa36309c0bbe62f04a561a1e02d51a4dc2c8331b9b3c2e47387f5f
        • MD5 SHA1 SHA512 TLSH

        firefox.exe

        • Path C:\Program Files\Mozilla Firefox\firefox.exe
        • Size 1.4MB
        • SHA256 3260871ecaf3ac3fa1de74761340116525bc8d2cc909fee92e0204540a422b5a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        private_browsing.exe

        • Path C:\Program Files\Mozilla Firefox\private_browsing.exe
        • Size 780KB
        • SHA256 f3d3f2a9e0fae9e8bbe0fec2e1c869f3d33c4350d4af82412094ec80507bc099
        • MD5 SHA1 SHA512 SSDEEP TLSH

        helper.exe.ico

        • Path C:\Program Files\Mozilla Firefox\uninstall\helper.exe.ico
        • Size 3KB
        • SHA256 44ae793c391e8578709e181e83cb820caaa10c08844440885d969a6c839b8a2b
        • MD5 SHA1 SHA512 TLSH

        PushConvertFrom.exe.exe

        • Path C:\Program Files\PushConvertFrom.exe.exe
        • Size 712KB
        • SHA256 503c2f3d098733876c569c5f4841dd3d021c9f5aeee3504d4df2fb0d811dc117
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vlc-cache-gen.exe.ico

        • Path C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe.ico
        • Size 3KB
        • SHA256 3b17b29b6c4e39fc36571f8e0795eae6559637529602ae7a37d5f8f6254d0500
        • MD5 SHA1 SHA512 TLSH

        MpCopyAccelerator.exe.ico

        • Path C:\Program Files\Windows Defender\MpCopyAccelerator.exe.ico
        • Size 3KB
        • SHA256 02221d573edefa486ba8fe5aee3c8a10c8c7e3188914c0f22df06bb1338db790
        • MD5 SHA1 SHA512 TLSH

        MpDlpCmd.exe.ico

        • Path C:\Program Files\Windows Defender\MpDlpCmd.exe.ico
        • Size 3KB
        • SHA256 9e3f1f8e5166514df44b02a1e0bf7474708dafba161e263cff087af62ba89ae5
        • MD5 SHA1 SHA512 TLSH

        wmpconfig.exe.ico

        • Path C:\Program Files\Windows Media Player\wmpconfig.exe.ico
        • Size 3KB
        • SHA256 a32208cf5c16d7223999e6ecf1c185bc88d519483ff56ad5ca5f2cc00e677307
        • MD5 SHA1 SHA512 TLSH

        setup.exe

        • Path C:\ProgramData\Adobe\Setup\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\setup.exe
        • Size 1.1MB
        • SHA256 f5174fbb1694c8d6447ece352f5785242c283fc40788736cf201e66552dcff8d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcredist_x86.exe.ico

        • Path C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe.ico
        • Size 3KB
        • SHA256 6ed1664d7718a68084ea1a4abb1d9621a6ae8da8e19db35cfca13aaa4c05eb33
        • MD5 SHA1 SHA512 TLSH

        vcredist_x86.exe

        • Path C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\vcredist_x86.exe
        • Size 1.1MB
        • SHA256 a95176df4f23240a41702ade12f607b01324eabe717e1bd7c8a01c5a7e1b30d8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcredist_x64.exe

        • Path C:\ProgramData\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe
        • Size 1.1MB
        • SHA256 63e1cc0d9877af4bd872186e386561bc23bf19348a5ee4442710a2ce267bd186
        • MD5 SHA1 SHA512 SSDEEP TLSH

        windowsdesktop-runtime-6.0.27-win-x64.exe

        • Path C:\ProgramData\Package Cache\{d87ae0f4-64a6-4b94-859a-530b9c313c27}\windowsdesktop-runtime-6.0.27-win-x64.exe
        • Size 1.3MB
        • SHA256 0f8664ec07a76143b4d73a1bf1151a89b30c30a7e2c9691ea274cbbdcf4ed6dc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        windowsdesktop-runtime-7.0.16-win-x64.exe

        • Path C:\ProgramData\Package Cache\{ef5af41f-d68c-48f7-bfb0-5055718601fc}\windowsdesktop-runtime-7.0.16-win-x64.exe
        • Size 1.3MB
        • SHA256 52bc64b0075d389e920164d4e12684aef59f5fcc159699336be304ad6826d72e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OneDrive.exe

        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe
        • Size 2.3MB
        • SHA256 d9797195635e177064ffa9c0a229dffa31eace984a52f8129c9d509066449efc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OneDrive.exe.ico

        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe.ico
        • Size 3KB
        • SHA256 3a2d7fd9799178af58fbd08a2fffc56398cbf289c7ddd5c5f0fb2e241395261e
        • MD5 SHA1 SHA512 TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 8033ad464b07ad40faf433d352f7d4442244a5d34d099d1bc74ab2c808ea7c88
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 7d65dabae6e3bcb1a705d30b808a5bb781efc22c3cfd8c0724aa3325de49cdce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 9d68d386fd769fd57614617ca2ad2312e7a33ab356fdb71338b82305c6eb339a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 65893ac1bbfffe31a64df0d99565042fd4f6a57a89fab15d0ba07faa69724339
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 8403c5e40afff5942fe0a3f129953e4a9deac887a1cdec23c5d577f65312da2c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 f1d16be62e96bd7aa533d1914647506cf061e67c18bdcab5f538dd5ecdb48ab8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 968cd250c4ffa6c6239ff17ee5d9aa1f1e17daa4259af90db1a5ba662fa38dcf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 426967c97e3b3131113b62149b8548eae977e3fe31b26c62e4c9eed2ccfb5887
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 5dbae3b72c3a88c35f290d3f939ef6814a717f99047cc5a6812abf06cd954435
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 6dffd65fc879b970ae5c308b5c93e2c5a508dc3fe143ffc6bd34cb8b22012b0f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 3f3a811dc13c8d55ccfba668bbad9c9cd82f5c37e6406b4518d79d828ba5ac98
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 1b67b38f8a7a603658ccbb6350ab673289361f4fd474b1d5e85904a8878bb3e7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 fb7a9f7cd0c66556bce85d75a72a7630a231552382bb993a831b16f3a74b0e81
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 5c829ea2a87ef2bf4f6059218d19475512fb0accefa0e0cd3149fdda349d882c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 a1be5c5cfa8ed107f2ba185ef64f21dcfb6f1523202ab8a289aa53e864bab581
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 3db275b3978d728ada3a068f66f8ce09d440ec100d258480dee8b33d17be31b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 4be72dcf8fdd7c6c1732f78f290dd236f7983b65e7cd6cfcd9f0bc137a77a83f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 40c4ec6ac852a0ae6b24ddc403834a2da8c7ca1cddf089035c23740482aa646f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 724cf8a346ad77be85c72108f53e93314dfc656d3aec72bc35ee1131ecf1b6e6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 afa67092f1d00e9793a1347de381172e41154fe7cbf3bf3cd63fd9b8eb1d6b59
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 ffe94145517468af526267d356fdb3c70befddb9ffcfe00d32cf5a20def0ece2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 7f5adeba65c6704979a88f23c412d3f5e77ed492ae575d63cad82de2760d8b10
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 0ff0206f64ae45910b2fb583b7a3ed4fc150a3ded5f86965fbe322c9d529e243
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 014d5c15e6a1907f9aff016563ac08224aa9ab52d0c068aa78ad57e0d1e06e7d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 89fb6aa18eb67e4499e51c7eccd62a113b83d1588fe65808607f0b79d75b7097
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 4ef57376e96a0606597c068540fe872f7113608225ce7a5d3a6c6686a93c5797
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 5917c129b4dcc26686e6832cbb9f098118eab044da432f0c97e39f5dc4afbd36
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 6edec03f48fbd7e5347761e85884cd1df8f51649609d713055eb24fb7d0156b1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 be6bbd1cf8f4599c7ea1dc23b19cdfe9511171eb24184b41702fe4789a0d97d4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 df82a22f23ebdf7166af219cd0395aec52753a874dea2fdc43b4f84587ca6e2e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 c388a80dc8e16c4fd7b5dd63da5ce856a5daa8a921e48d3e2160c7f9ca80748a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 a0a79c3643c4002fe9651cb8a99ed8fa7f6b6a5eb3e461262330316e9bd5ae35
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 fe13872259caee8a4f3d0cb53ec1db5b0060e579ed90de5e95f34dd7da04c227
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 89443a31e29d2907d8db4d7194120727b3822a71ede20a01619d6e6425200443
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 2325951dc5f51c29dd8256d1a8fe4f2387faabd8969add01f72c2460ddcc2429
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 405ef9b04d07234ce5a90eb40ee3b9cc32f1926d9aaec532c3f2d0e380a3d725
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 7098dec76204cfd6d3d7e3a4358113a1266f3f201afbbaafbc4e04f3a8786a7e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 ce069b831a9daa57a9f65c9779d169c428a8d39d9dead243290365c1e7baf505
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 1f4ee867ad3a4a0639803a45386fb301254f70b41fabf722d902c9a2d608e045
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 8507aa4531486d1ff91def77e4140c1b22f5ff12ac88060b21948252adabd82d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 55f8f282db84964a3e9de74e0c304954a09036ea84c1181cb8765f6ec9d4e20e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 e87087f17bddee290ec1ecccee3a5d477d3b6d9547e4ae5767ffd0ad95f87aa6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 95deb33df2e3ac4c38418085124ee418c2ca0d99409395baa5098849028b716b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 a6f5fcc9f28ae6568e011cc60a7e34c80e0ed43e6c20e441b6cdaea2ceaba606
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 05c194745d0f4c18156cfc629220cf2b67804d5db9162138151a97aeec11dbc0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 009a002825548ccd9e40b8b253a3f51aea3b8fd5c6835668fb10c5cd54f446bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 b4c0ae05f78d5d981ef2c259283ba550ff9222c5e5726035fd0ea710bf0dfac2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 480f608d2a2942618a32512df386d590f8f64ecdb4fecc76c8b07eb520f41af6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iconcache_idx.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 02ad3b6604af799868397f925abab36643bffcdaaaaafb457288eecce493c656
        • MD5 SHA1 SHA512 SSDEEP TLSH

        2026-10-19_7776d10b6ed9ecb0f393662cbef3f39f_akira_cobalt-strike_elex_icedid_njrat_vidar.exe.exe

        • Path C:\Users\Admin\AppData\Local\Temp\2026-10-19_7776d10b6ed9ecb0f393662cbef3f39f_akira_cobalt-strike_elex_icedid_njrat_vidar.exe.exe
        • Size 1.2MB
        • SHA256 24574e53d518ab8a2288fab6f7a1da032cc71d3bd2ca2dab3db70fc855a3dc56
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LimitConvertFrom.exe

        • Path C:\Users\Admin\AppData\Roaming\DebugMerge\LimitConvertFrom.exe
        • Size 961KB
        • SHA256 91ec0c9cdafeefca7479be054a099fdc6d9c66a4e02ef4287b3d7863a94de8ac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/5504-1055-0x0000000000400000-0x00000000004D4000-memory.dmp

        memory/5504-0-0x0000000000400000-0x00000000004D4000-memory.dmp