General
- Target 2026-05-17_73335c040aeef3f06266fbb4539477ad_akira
- Size 945KB
- Sample260517-fnfbcaf12q
- SHA256 6eb41061b35b36e30f7b1d62b45714b157ec83ec6f0d1e10bc79c71350db7f2d
- MD5 73335c040aeef3f06266fbb4539477ad
- SHA1 4e2b4ba3993c66d018c3c17aace6e6f8e9d10eb4
- SHA512 6baab37f59011b0ab8963efc80c0860c20a1419bee18d8bb0fabb7536412d76698776094ed440b4e83ce58f0df72f4bba5b44324fc9e4e6b4f5e519c94813b02
- SSDEEP 24576:3BbYiNOByyjvH3+/UcCynrvxwExjoDj8SxWkHPVx6:3BHnyjvH3+/UcCynrJwA0TTHn6
- TLSH T1DD25E116E541E0B5D4A350F2111FE3F689246B34891789CBFF49DE796A3A1E0EF2930B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-05-17_73335c040aeef3f06266fbb4539477ad_akira
Resource
ubuntu1804-amd64-20260513-en
Malware Config
Targets
-
- Target 2026-05-17_73335c040aeef3f06266fbb4539477ad_akira
- Size 945KB
- SHA256 6eb41061b35b36e30f7b1d62b45714b157ec83ec6f0d1e10bc79c71350db7f2d
- MD5 73335c040aeef3f06266fbb4539477ad
- SHA1 4e2b4ba3993c66d018c3c17aace6e6f8e9d10eb4
- SHA512 6baab37f59011b0ab8963efc80c0860c20a1419bee18d8bb0fabb7536412d76698776094ed440b4e83ce58f0df72f4bba5b44324fc9e4e6b4f5e519c94813b02
- SSDEEP 24576:3BbYiNOByyjvH3+/UcCynrvxwExjoDj8SxWkHPVx6:3BHnyjvH3+/UcCynrJwA0TTHn6
- TLSH T1DD25E116E541E0B5D4A350F2111FE3F689246B34891789CBFF49DE796A3A1E0EF2930B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Executes dropped EXE
-
Traces itself
Traces itself to prevent debugging attempts
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads MAC address of network interface
Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Scheduled Task/Job
1Cron
1