General

  • Target
    2026-05-17_73335c040aeef3f06266fbb4539477ad_akira
  • Size 945KB
  • Sample260517-fnfbcaf12q
  • SHA256 6eb41061b35b36e30f7b1d62b45714b157ec83ec6f0d1e10bc79c71350db7f2d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-05-17_73335c040aeef3f06266fbb4539477ad_akira
    • Size 945KB
    • SHA256 6eb41061b35b36e30f7b1d62b45714b157ec83ec6f0d1e10bc79c71350db7f2d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Deletes itself

    • Executes dropped EXE

    • Traces itself

      Traces itself to prevent debugging attempts

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Modifies init.d

      Adds/modifies system service, likely for persistence.

    • Reads MAC address of network interface

      Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.

    • Reads process memory

      Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.

MITRE ATT&CK Enterprise v16

Tasks