General
- Target 2026-07-05_f7c9aa818d825fa22aa68d2d856c1378_akira
- Size 589KB
- Sample260705-l11qpsbw2s
- SHA256 3f8034e4ad945eb5276ee9eea132b836d820a089c3aeb1a9beed01c996d60864
- MD5 f7c9aa818d825fa22aa68d2d856c1378
- SHA1 d46f226a43f60b768018d3280aa0a09a8e80700d
- SHA512 9a8806644cffbf4af90f578361c4fe3559a1252440a9d6d195b64943ad295c3a629d91e4ddbcdb05b971ce99f8cec79f58cd7590afa44d44a045e0608ba58e00
- SSDEEP 6144:NCynsAgHCIR6kgcxnl67onk37KJp+BEN1WKvXnqPlahTQzDLRwc+9IfeuFy5zpAj:QxKI6CkGjb7EzDLdUIxQ/
- TLSH T115D4AF257A55986DD04AC07883868AB27AB370CA1F316AEF02D5813C3F799F96F3C754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-05_f7c9aa818d825fa22aa68d2d856c1378_akira.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_f7c9aa818d825fa22aa68d2d856c1378_akira.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_f7c9aa818d825fa22aa68d2d856c1378_akira
- Size 589KB
- SHA256 3f8034e4ad945eb5276ee9eea132b836d820a089c3aeb1a9beed01c996d60864
- MD5 f7c9aa818d825fa22aa68d2d856c1378
- SHA1 d46f226a43f60b768018d3280aa0a09a8e80700d
- SHA512 9a8806644cffbf4af90f578361c4fe3559a1252440a9d6d195b64943ad295c3a629d91e4ddbcdb05b971ce99f8cec79f58cd7590afa44d44a045e0608ba58e00
- SSDEEP 6144:NCynsAgHCIR6kgcxnl67onk37KJp+BEN1WKvXnqPlahTQzDLRwc+9IfeuFy5zpAj:QxKI6CkGjb7EzDLdUIxQ/
- TLSH T115D4AF257A55986DD04AC07883868AB27AB370CA1F316AEF02D5813C3F799F96F3C754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables referencing many IR and analysis tools
- Custom signature
UPX dump on OEP (original entry point)
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.