General
- Target 2026-07-04_b413fe530351173c28dfd1d56fb6fcb6_akira
- Size 7.9MB
- Sample260704-v9kwaaex3j
- SHA256 1e759a161df19849a81bfb530a40c4a8fa1ca24f67e2997c908ffa788101ff93
- MD5 b413fe530351173c28dfd1d56fb6fcb6
- SHA1 6baadc2bcc2e30acfa43192c6d63125468be0aa0
- SHA512 ef9283b364cf4ce5c69717183ea44ad3999543aa5b79a86ff25d0c538eb29870094dd646dc7cac100dcfc8ae5891e4bfd2018121eaf3cbb0cb01b1da130c6e91
- SSDEEP 196608:qOl+x3W/TPPUtCaGPBCgZnTs8+zcra9dcS9zk7I/kPe6Tb:r+x3WDUYzPMMAgtOz0xLb
- TLSH T1EC861272D3A2F06EE556913CA954A128D4CE70DF1398DA4133592DFB3D0EA394B483BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_b413fe530351173c28dfd1d56fb6fcb6_akira.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_b413fe530351173c28dfd1d56fb6fcb6_akira.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_b413fe530351173c28dfd1d56fb6fcb6_akira
- Size 7.9MB
- SHA256 1e759a161df19849a81bfb530a40c4a8fa1ca24f67e2997c908ffa788101ff93
- MD5 b413fe530351173c28dfd1d56fb6fcb6
- SHA1 6baadc2bcc2e30acfa43192c6d63125468be0aa0
- SHA512 ef9283b364cf4ce5c69717183ea44ad3999543aa5b79a86ff25d0c538eb29870094dd646dc7cac100dcfc8ae5891e4bfd2018121eaf3cbb0cb01b1da130c6e91
- SSDEEP 196608:qOl+x3W/TPPUtCaGPBCgZnTs8+zcra9dcS9zk7I/kPe6Tb:r+x3WDUYzPMMAgtOz0xLb
- TLSH T1EC861272D3A2F06EE556913CA954A128D4CE70DF1398DA4133592DFB3D0EA394B483BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.
- Custom signature
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
- Custom signature
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
- Custom signature
Detects executables referencing many confidential data stores found in browsers, mail clients, crypt
Suspicious use of SetThreadContext