General
-
Target
637e28b38086ff9efd1606805ff57aaf6cdec4537378f019d6070a5efdc9c983.exe
-
Size
573KB
-
Sample
240620-rv6yeswgrq
-
MD5
9f1c1e45b292299818c7fe64c865e67a
-
SHA1
1cce67a2b76d3bcd85f158f533e55296b8aea592
-
SHA256
637e28b38086ff9efd1606805ff57aaf6cdec4537378f019d6070a5efdc9c983
-
SHA512
80eab29223eb6484f35b16582dcee4814d85f23ba8628ea273897afea72ba4c815850dd4ff1391e1f3b49de26fb0525031a56973c72870b4db68ba28a54da3e3
-
SSDEEP
6144:8KIpz8gbJnHlZB1wYvPgwi/YkVlWGGv5wVRU/rCPED3xTfuRkbjaRVepohAYHdGZ:BGz7JHsYKN2v5/G+TfuR1VioyYHjS
Static task
static1
Behavioral task
behavioral1
Sample
637e28b38086ff9efd1606805ff57aaf6cdec4537378f019d6070a5efdc9c983.exe
Resource
win10-20240404-en
Malware Config
Extracted
C:\Program Files\akira_readme.txt
akira
https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion
https://akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion
Targets
-
-
Target
637e28b38086ff9efd1606805ff57aaf6cdec4537378f019d6070a5efdc9c983.exe
-
Size
573KB
-
MD5
9f1c1e45b292299818c7fe64c865e67a
-
SHA1
1cce67a2b76d3bcd85f158f533e55296b8aea592
-
SHA256
637e28b38086ff9efd1606805ff57aaf6cdec4537378f019d6070a5efdc9c983
-
SHA512
80eab29223eb6484f35b16582dcee4814d85f23ba8628ea273897afea72ba4c815850dd4ff1391e1f3b49de26fb0525031a56973c72870b4db68ba28a54da3e3
-
SSDEEP
6144:8KIpz8gbJnHlZB1wYvPgwi/YkVlWGGv5wVRU/rCPED3xTfuRkbjaRVepohAYHdGZ:BGz7JHsYKN2v5/G+TfuR1VioyYHjS
Score10/10-
Akira
Akira is a ransomware first seen in March 2023 and targets several industries, including education, finance, real estate, manufacturing, and consulting.
-
Renames multiple (7677) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops startup file
-
Drops desktop.ini file(s)
-