2026-05-22_f9e3891aa5dc0e8252f8385872f337c5_akira

Sharing

Copy URL Twitter E-mail

General

Target
2026-05-22_f9e3891aa5dc0e8252f8385872f337c5_akira
Size 365KB
Sample260522-3sprxaa141
SHA256 50aa392cd4396f18521ffcde92f5eaa93ddaf9b76dd9ab8aca4540846feefbac
MD5 f9e3891aa5dc0e8252f8385872f337c5
SHA1 33efbb3a14711d1b49ab677ec59299e17c043df1
SHA512 8aee153aaeacdb89e89a95cd4ecbd78e9affe7fb5a2e79e145816c60ad6b7e95f65f860991040d29059ec7c501d8c78ed7c41ef33187955074432192d52ac350
SSDEEP 6144:Ziosr6b5ZSMLKFbbtpD/9MR+l4pxXl7rbLTyKZvjHAO3QVydntf:H66zSd4pxXl7rbLTyYjH73h
TLSH
T113846C4BF5A255BCC156C078C36B9337BA37758D0120B9BB13DA86702E92FA41F28F59
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-22_f9e3891aa5dc0e8252f8385872f337c5_akira

File Explorer

2026-05-22_f9e3891aa5dc0e8252f8385872f337c5_akira

.exe 365KB

2026-05-22_f9e3891aa5dc0e8252f8385872f337c5_akira

IMPHASH ddc80bb222cd7782db42e5c573419840
SHA256 50aa392cd4396f18521ffcde92f5eaa93ddaf9b76dd9ab8aca4540846feefbac
MD5 f9e3891aa5dc0e8252f8385872f337c5
SHA1 33efbb3a14711d1b49ab677ec59299e17c043df1
SHA512 8aee153aaeacdb89e89a95cd4ecbd78e9affe7fb5a2e79e145816c60ad6b7e95f65f860991040d29059ec7c501d8c78ed7c41ef33187955074432192d52ac350
SSDEEP 6144:Ziosr6b5ZSMLKFbbtpD/9MR+l4pxXl7rbLTyKZvjHAO3QVydntf:H66zSd4pxXl7rbLTyYjH73h
TLSH
T113846C4BF5A255BCC156C078C36B9337BA37758D0120B9BB13DA86702E92FA41F28F59
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5120

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

GetUserNameW OpenProcessToken RegCloseKey

gdi32

GetDeviceCaps

kernel32

AddVectoredExceptionHandler CloseHandle CreateFileMappingA CreateFileW CreateToolhelp32Snapshot DeleteCriticalSection DuplicateHandle EnterCriticalSection GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentThread GetCurrentThreadId GetEnvironmentVariableW GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetProcAddress GetProcessHeap GetStdHandle HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete InitializeCriticalSection LeaveCriticalSection MapViewOfFile Module32FirstW Module32NextW MultiByteToWideChar RaiseException RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetFileInformationByHandle SetLastError SetThreadStackGuarantee SetUnhandledExceptionFilter Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile VirtualProtect VirtualQuery WaitForSingleObject WriteConsoleW __C_specific_handler

api-ms-win-crt-environment-l1-1-0

__p__environ

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-private-l1-1-0

memcmp memcpy memmove

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _cexit _configure_narrow_argv _crt_atexit _exit _fpreset _initialize_narrow_environment _initterm _initterm_e _set_app_type _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf

api-ms-win-crt-string-l1-1-0

memset strlen strncmp

ntdll

NtReadFile NtWriteFile RtlNtStatusToDosError

ole32

CoInitialize CoTaskMemFree

psapi

GetMappedFileNameW

shell32

SHGetFolderPathW SHGetSpecialFolderPathW

user32

GetDesktopWindow GetForegroundWindow GetSystemMetrics GetWindowTextLengthW

version

GetFileVersionInfoSizeW GetFileVersionInfoW

winmm

timeBeginPeriod

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

Name

.xeW

Size

299KB

Virtual Size

299KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.j8mn

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bRy

Size

34KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.0Dy

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.uGkb9

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.yQ

Size

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wHm6lw

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.zQ7iDu

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ccSV

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fUwLUY

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.ihWV

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-22_f9e3891aa5dc0e8252f8385872f337c5_akira

advapi32

gdi32

kernel32

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

ntdll

ole32

psapi

shell32

user32

version

winmm

api-ms-win-core-synch-l1-2-0

generic