Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/11/2026, 23:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
General
- Target 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe
- Size 449KB
- Sample261101-3fl59adf23
- SHA256 7371bd1c66d3db131d2a49c60249a25e324127886aa1edc25730f6b068875f2f
- MD5 8384cab922579b57675e250ef35186bb
- SHA1 bdbe5ff88196912fbc6a08e4aabcf8a5939902e1
- SHA512 76f2d8ea00d05ac900cec4b6127fa9e151e2a7aa9d094ccc911725f90427ffda88f9d69f73e081125404f9e3286a8e63a9d3b8a79c4ddbbd7e78fa2a4bfba452
- SSDEEP 6144:8jMKITkBXkHhD1NnjZeNRIxs00KAyEIgrN3h08zHgSKrVmQPC9TBOvIVcjrH:/fnjwkxzUNIg5h08gJmKC9TovA2H
- TLSH T1A2A4BF59B3E008F9E8A3C139C8664636D772BC1A1BA0C39F1394E65A1F333D0593EB95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Drops file in System32 directory 64 IoCs
description ioc Process File created C:\Windows\SysWOW64\mmgaserver.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\netbtugc.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\powercfg.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\scrnsave.scr 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\wecutil.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\tasklist.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\dccw.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\sfc.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\TsWpfWrp.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\esentutl.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\iscsicpl.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\SystemPropertiesComputerName.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\wbem\WmiPrvSE.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\colorcpl.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\help.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\IME\SHARED\imecfmui.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\PkgMgr.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\chkdsk.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\Com\MigRegDB.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\dcomcnfg.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\mfpmp.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\typeperf.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\unregmp2.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\prevhost.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\RdpSa.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\takeown.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\cttune.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\Magnify.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\mcbuilder.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\MRINFO.EXE- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\PresentationHost.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\regini.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\SystemPropertiesComputerName.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\TpmTool.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\control.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\finger.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\fltMC.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\hdwwiz.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\msiexec.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\ndadmin.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\OposHost.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\psr.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\credwiz.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\dialer.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\finger.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\IME\SHARED\IMEWDBLD.EXE 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\msfeedssync.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\print.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\rekeywiz.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\subst.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\find.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\OposHost.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\pcaui.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\rrinstaller.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\SyncHost.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\tzutil.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\WWAHost.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\ntprint.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\SystemPropertiesProtection.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\AppVDllSurrogate.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\CertEnrollCtrl.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\ftp.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SysWOW64\mode.com 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe - Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Browser\WCChromeExtn\WCChromeNativeMessagingHost.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\LogTransport2.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Java\jdk-1.8\bin\javaws.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Java\jre-1.8\bin\servertool.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Microsoft Office\root\Office16\SETLANG.EXE 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Windows Defender\MpCopyAccelerator.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Windows Media Player\wmpconfig.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedgewebview2.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Installer\setup.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Java\jdk-1.8\jre\bin\rmid.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Microsoft Office\root\Office16\msoasb.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\osmclienticon.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Windows Defender Advanced Threat Protection\SenseIdentity.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevated_tracing_service.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\pwahelper.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Java\jdk-1.8\bin\jhat.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Java\jdk-1.8\bin\unpack200.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Java\jre-1.8\bin\policytool.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\outicon.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-006E-0409-1000-0000000FF1CE}\misc.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Mozilla Firefox\default-browser-agent.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\ADelRCP.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Java\jdk-1.8\bin\jconsole.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Java\jdk-1.8\bin\kinit.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Java\jre-1.8\bin\javacpl.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Microsoft Office\root\Office16\XLICONS.EXE 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_disable\1.3.195.65\MicrosoftEdgeComRegisterShellARM64.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files (x86)\Windows Mail\wabmig.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Java\jre-1.8\bin\kinit.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Microsoft Office\root\Office16\excelcnv.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Microsoft Office\root\Office16\SDXHelperBgt.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\DW\DWTRIG20.EXE- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\bin\Pester.bat 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaws.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Installer\setup.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Java\jre-1.8\bin\rmiregistry.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroTextExtractor.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\reader_sl.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Java\jdk-1.8\jre\bin\servertool.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Microsoft Office\root\Office16\misc.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Microsoft Office 15\ClientX64\IntegratedOffice.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Mozilla Firefox\uninstall\helper.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Browser\WCChromeExtn\WCChromeNativeMessagingHost.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\msedge_proxy.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Microsoft Office\root\Office16\WORDICON.EXE 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Windows Defender Advanced Threat Protection\SenseTVM.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files (x86)\Windows Defender\MpCmdRun.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Java\jdk-1.8\bin\extcheck.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\visicon.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\notification_click_helper.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files (x86)\Windows Mail\wab.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Java\jdk-1.8\jre\bin\tnameserv.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\sscicons.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe - Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\WinSxS\amd64_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_10.0.26100.1150_none_9f6738de73cf4ce3\dpnsvr.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-fileexplorer.appxmain_31bf3856ad364e35_10.0.26100.1591_none_052b2ae1ad719889\r\FileExplorer.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-lxss-wsl_31bf3856ad364e35_10.0.26100.1150_none_1ed5d4d47eca0768\wsl.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-storage-refsdedupsvc_31bf3856ad364e35_10.0.26100.1591_none_739bd7d2b0e92fb8\r\ReFsDedupSvc.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-tpm-adminsnapin_31bf3856ad364e35_10.0.26100.1_none_7470bf4f47cdbeab\TpmInit.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMConfigInstaller.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_10.0.26100.1_none_69287f183fd23745\aspnet_wp.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regbrowsers.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-newdev_31bf3856ad364e35_10.0.26100.1150_none_ad5d9bcb00930036\ndadmin.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.1_none_065309a92fd714e9\TiWorker.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-fsutil_31bf3856ad364e35_10.0.26100.1_none_d3ac672b8cd9f8b1\fsutil.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-installer-executable_31bf3856ad364e35_10.0.26100.712_none_f5f8369ba361b124\msiexec.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-dusm_31bf3856ad364e35_10.0.26100.1591_none_482bc815c9162047\dusmtask.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-slidetoshutdown_31bf3856ad364e35_10.0.26100.1_none_911934c40449e6a1\SlideToShutDown.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-atbroker_31bf3856ad364e35_10.0.26100.1591_none_75b5554a02bcd133\r\AtBroker.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-embedded-bootexp_31bf3856ad364e35_10.0.26100.1150_none_6548a7f0b3a3e4e1\r\BootExpCfg.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..policy-cmdlinetools_31bf3856ad364e35_10.0.26100.1150_none_d7504f768bde2804\r\gpresult.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-webcamexperience_31bf3856ad364e35_10.0.26100.1150_none_08d020c05bb7ff70\r\CameraSettingsUIHost.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-s..ative-serverbox-isv_31bf3856ad364e35_10.0.26100.1_none_fc5f223b9b5c3cc5\RMActivate_ssp_isv.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\Microsoft.NET\Framework\v4.0.30319\dfsvc.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-security-tools-klist_31bf3856ad364e35_10.0.26100.1_none_3e2848112f1873ed\klist.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-t..onagent-proxyobject_31bf3856ad364e35_10.0.26100.1150_none_ff5cc17171576ed5\r\RdpSaProxy.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-dataexchangehost_31bf3856ad364e35_10.0.26100.1301_none_8550d029188c257c\r\DataExchangeHost.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p..auncher-cmdlinetool_31bf3856ad364e35_10.0.26100.1_none_f4339379cb9217a5\pwlauncher.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-s..native-whitebox-isv_31bf3856ad364e35_10.0.26100.1150_none_85392e759f939eae\RMActivate_isv.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_10.0.26100.1150_none_8097a9dca8ee24c4\qappsrv.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-x..jectdialog.appxmain_31bf3856ad364e35_10.0.26100.1150_none_971a4fc44ce4ae24\r\XGpuEjectDialog.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-i..switch-toasthandler_31bf3856ad364e35_10.0.26100.1591_none_70acf1931a9fbc01\r\InputSwitchToastHandler.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\x86_netfx35linq-vb_compiler_orcas_31bf3856ad364e35_10.0.27000.360_none_c319a5f63c95aa27\vbc.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\SystemApps\Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy\AddSuggestedFoldersToLibraryDialog.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p..nsimulation-service_31bf3856ad364e35_10.0.26100.1150_none_74a667b087b1ac17\r\PerceptionSimulationService.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-snippingtool-app_31bf3856ad364e35_10.0.26100.1150_none_35ab52a6398cdc65\SnippingTool.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-time-tool_31bf3856ad364e35_10.0.26100.1150_none_88f06bccebd86289\r\w32tm.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-utilman_31bf3856ad364e35_10.0.26100.1591_none_9e69ab15e1442616\Utilman.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_netfx4-ngen_exe_b03f5f7f11d50a3a_4.0.15912.100_none_aaf04994419917f0\ngen.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-cleanmgr_31bf3856ad364e35_10.0.26100.1_none_748c8913fa792db3\cleanmgr.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-format_31bf3856ad364e35_10.0.26100.1_none_2dd1356526e6ef59\format.com- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-bits-bitsadmin_31bf3856ad364e35_10.0.26100.1150_none_e8f8e178bc55f481\r\bitsadmin.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_10.0.26100.1591_none_720b9e48718f9c5a\splwow64.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-recoverydrive_31bf3856ad364e35_10.0.26100.1591_none_c452ac383bb44c33\r\RecoveryDrive.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-p..structureexecutable_31bf3856ad364e35_10.0.26100.1591_none_9e1d25f83a6fdbc2\r\lodctr.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\x86_netfx-clr_ilasm_exe_b03f5f7f11d50a3a_10.0.26100.1_none_a74fce2d41576c14\ilasm.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInUtil.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-netplwiz-exe_31bf3856ad364e35_10.0.26100.1_none_ea4a5d2678ee83a1\Netplwiz.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-speechcommon-onecore_31bf3856ad364e35_10.0.26100.1591_none_0f19119bcdcaf335\SpeechModelDownload.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-proquota_31bf3856ad364e35_10.0.26100.1_none_2f0f4a8a2f528469\proquota.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..nagement-appvsystem_31bf3856ad364e35_10.0.26100.1150_none_e501748828a1adac\AppVClient.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-ribbons_31bf3856ad364e35_10.0.26100.1150_none_249c3478d7e5d3ca\r\Ribbons.scr- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-spelling-host.binaries_31bf3856ad364e35_10.0.26100.1150_none_a91ae2d49210b003\r\MsSpellCheckingHost.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-t..es-workspaceruntime_31bf3856ad364e35_10.0.26100.1150_none_c24c8b338d2c21f3\r\wksprt.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-d..d-searchintegration_31bf3856ad364e35_10.0.26100.1591_none_2bcc571573c94745\IMESEARCH.EXE- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-d..me-japanese-setting_31bf3856ad364e35_10.0.26100.1591_none_58449d9961468d2f\r\IMJPSET.EXE- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-eudcedit_31bf3856ad364e35_10.0.26100.1150_none_f57fd51c6f680fbc\eudcedit.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-security-ngc-trustlet_31bf3856ad364e35_10.0.26100.1591_none_819ed9883e248be5\r\NgcIso.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_state.exe 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-efs-rekeywiz_31bf3856ad364e35_10.0.26100.1150_none_a3d1faf3bbc1c7d8\r\rekeywiz.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-adminservice_31bf3856ad364e35_10.0.26100.1150_none_f64f3a9ea7a6b9a1\WMSvc.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-m..odeupdate-servicing_31bf3856ad364e35_10.0.26100.1_none_a07bad500e90d9fe\ucsvc.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-tcpip-utility_31bf3856ad364e35_10.0.26100.1301_none_ce938c0efedcde06\ARP.EXE- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_caspol_b03f5f7f11d50a3a_4.0.15912.0_none_c8bf902cd831831a\CasPol.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-m..ommandlineutilities_31bf3856ad364e35_10.0.26100.1_none_7a109607cfe12f00\print.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-admincmdtools_31bf3856ad364e35_10.0.26100.1150_none_50956d2d42f20d39\r\rpcinfo.exe- 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-31_8384cab922579b57675e250ef35186bb_cobalt-strike_elex_icedid_njrat_vidar.exe"1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
PID:3352
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\7-Zip\7zFM.exe-
- Size 1.4MB
- SHA256 a92beb556d8b4c64d5030b5bde56afeee44d4511d7076bb6a42fe1132cf5fac6
- MD5 f2387b97dffff385b641281823bf54b7
- SHA1 4272255ac3b82978b420c29e761fe1e1ce4a80b6
- SHA512 bbc88334ed4b8e171e5c72a019e17779fc5568a2e3da7ceb671fb7c3ae25d29c4d79e9e4b122c46f3a905e6b4c7b50507c5cf79133e22e6ada65ee4097238229
- SSDEEP 24576:/fl2IQh5g56TJ2Ra7/ezSC6vUyD/aqgrvWx6q8wyup:12IQkETB/ezSC6vUzPvMHjyu
- TLSH T122653A15F6788333D0B3C0BAC5D6AA6AFE7234465B3089CB0246D76C2E277E58536739
- MD5 SHA1 SHA512 SSDEEP TLSH