2026-07-23_276c84193cba906c90d565324f12110e_akira

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-23_276c84193cba906c90d565324f12110e_akira
Size 1.1MB
Sample260723-l85pmahl21
SHA256 ed4ab089a8746c395ca1f59374e9153ce16b6be5f6694a68a64bb66aca9ba0b4
MD5 276c84193cba906c90d565324f12110e
SHA1 3b0d5f3da75268364d5837294911ecba877d47a9
SHA512 f7cb7e5f3ae4f399c54e4978f78df1b5e2cfa92ddc21c2990ef2c7b754e704236c47837229bad9fdd191703ece6fcc74b53145e0496799f748bd07424b29cfab
SSDEEP 24576:v0fsIyunt75XYujQAf3Yz/G41MZmFlgc9mMCtXc9r6:MfUuntlYuPf3YzuNXZXcl
TLSH
T1BA357D5696AE01E8C87ED17CC6939A17FAB1385103655BDB07E08A5A3F27BE01F3E311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-07-23_276c84193cba906c90d565324f12110e_akira

.exe 1.1MB

2026-07-23_276c84193cba906c90d565324f12110e_akira

IMPHASH 8f3df7d84b10323a92da2f4434c36d1e
SHA256 ed4ab089a8746c395ca1f59374e9153ce16b6be5f6694a68a64bb66aca9ba0b4
MD5 276c84193cba906c90d565324f12110e
SHA1 3b0d5f3da75268364d5837294911ecba877d47a9
SHA512 f7cb7e5f3ae4f399c54e4978f78df1b5e2cfa92ddc21c2990ef2c7b754e704236c47837229bad9fdd191703ece6fcc74b53145e0496799f748bd07424b29cfab
SSDEEP 24576:v0fsIyunt75XYujQAf3Yz/G41MZmFlgc9mMCtXc9r6:MfUuntlYuPf3YzuNXZXcl
TLSH
T1BA357D5696AE01E8C87ED17CC6939A17FAB1385103655BDB07E08A5A3F27BE01F3E311
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

b6:c3:c8:3c:fe:17:00:0f:01:24:0a:eb:a9:48:33:37:b0:e7:8b:eb:0b:c9:b9:6a:5e:85:a8:d0:ca:ba:6d:c7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Denver Technologies\, Inc. dba Warp,O=Denver Technologies\, Inc. dba Warp,L=New York,ST=New York,C=US

Chains

Jul 16, 2026

CN=Denver Technologies\, Inc. dba Warp,O=Denver Technologies\, Inc. dba Warp,L=New York,ST=New York,C=US

CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=Denver Technologies\, Inc. dba Warp,O=Denver Technologies\, Inc. dba Warp,L=New York,ST=New York,C=US

Serial Number

33:00:03:32:a4:a8:17:2c:d7:27:95:b0:2e:00:00:00:03:32:a4

Issuer

CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 15, 2026 - Jul 18, 2026

Subject

CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:16:31:92:8d:92:02:65:7b:9a:00:00:00:00:00:16

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 26, 2026 - Mar 26, 2031

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7A00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:58:65:cd:eb:3f:a1:d7:fc:d2:00:00:00:00:00:58

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2025 - Oct 22, 2026

Minor OS version

Major OS version

Entry point

797024

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\dev\warp\microsoft-terminal\bin\x64\Release\OpenConsole.pdb

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExW GetModuleHandleW GetProcAddress FindResourceExW LoadResource LockResource GetModuleFileNameW GetModuleHandleExW LoadStringW GetModuleFileNameA LoadLibraryExA FreeLibrary

api-ms-win-core-synch-l1-1-0

CreateMutexExW DeleteCriticalSection AcquireSRWLockShared ReleaseSRWLockShared CreateEventExW ResetEvent OpenSemaphoreW WaitForSingleObjectEx SetEvent CreateSemaphoreExW AcquireSRWLockExclusive ReleaseSRWLockExclusive InitializeCriticalSectionAndSpinCount ReleaseSemaphore WaitForSingleObject InitializeCriticalSectionEx ReleaseMutex

api-ms-win-core-heap-l1-1-0

HeapAlloc GetProcessHeap HeapFree

api-ms-win-core-errorhandling-l1-1-0

RaiseException SetUnhandledExceptionFilter GetLastError UnhandledExceptionFilter SetLastError

api-ms-win-core-processthreads-l1-1-0

ExitThread DeleteProcThreadAttributeList GetStartupInfoW ExitProcess InitializeProcThreadAttributeList SetProcessShutdownParameters CreateProcessW OpenProcessToken GetProcessTimes TlsAlloc GetCurrentProcessId TlsGetValue GetCurrentProcess TlsSetValue TlsFree GetCurrentThreadId TerminateProcess CreateThread UpdateProcThreadAttribute

api-ms-win-core-localization-l1-2-0

GetOEMCP GetLocaleInfoEx GetUserDefaultLocaleName GetCPInfo FormatMessageW FormatMessageA IsValidCodePage GetACP

api-ms-win-core-debug-l1-1-0

OutputDebugStringW IsDebuggerPresent DebugBreak

api-ms-win-core-handle-l1-1-0

DuplicateHandle CloseHandle

api-ms-win-core-string-l1-1-0

CompareStringOrdinal MultiByteToWideChar WideCharToMultiByte

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW RoOriginateError

api-ms-win-eventing-provider-l1-1-0

EventSetInformation EventWriteTransfer EventUnregister EventRegister

api-ms-win-core-processenvironment-l1-1-0

GetEnvironmentVariableW SetEnvironmentVariableW GetStdHandle SearchPathW GetCommandLineW ExpandEnvironmentStringsW

api-ms-win-core-com-l1-1-0

CoResumeClassObjects CoUninitialize CoRevokeClassObject CoInitializeEx IIDFromString CoCreateInstance CoTaskMemAlloc CoRegisterClassObject CoAddRefServerProcess CoReleaseServerProcess CoTaskMemFree

api-ms-win-core-util-l1-1-0

DecodePointer EncodePointer

api-ms-win-core-winrt-l1-1-0

RoRevokeActivationFactories RoRegisterActivationFactories

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString WindowsIsStringEmpty WindowsGetStringRawBuffer WindowsStringHasEmbeddedNull WindowsDeleteString

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeAllConditionVariable InitOnceExecuteOnce Sleep WaitOnAddress SleepConditionVariableSRW WakeByAddressSingle

ntdll

NtQueryVolumeInformationFile NtQueryInformationFile

usp10

ScriptStringAnalyse ScriptStringFree ScriptIsComplex ScriptStringOut

api-ms-win-crt-runtime-l1-1-0

_configure_wide_argv _initialize_wide_environment terminate _invoke_watson _errno _set_app_type _initterm _initialize_onexit_table _invalid_parameter_noinfo _get_wide_winmain_command_line _register_onexit_function _initterm_e exit _exit _c_exit _register_thread_local_exe_atexit_callback abort _seh_filter_exe _cexit _crt_atexit

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode __stdio_common_vswprintf __stdio_common_vswprintf_s __stdio_common_vsprintf_s

api-ms-win-crt-string-l1-1-0

strcpy_s strlen towlower wcscpy_s strcmp wcsncmp wcsnlen

api-ms-win-crt-math-l1-1-0

ceil ceilf lround roundf lroundf __setusermatherr floorf log10 lrintf pow powf

api-ms-win-crt-convert-l1-1-0

wcstol wcstoul

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolWait CreateThreadpoolTimer WaitForThreadpoolWaitCallbacks CloseThreadpoolWait SetThreadpoolTimer CloseThreadpoolTimer SetThreadpoolWait

ext-ms-win-uiacore-l1-1-0

UiaHostProviderFromHwnd UiaReturnRawElementProvider

oleaut32

SafeArrayPutElement SafeArrayCreateVector VariantClear SysStringLen SysAllocString VariantInit SysFreeString SafeArrayDestroy

api-ms-win-core-libraryloader-l1-2-1

FindResourceW LoadLibraryW

api-ms-win-shcore-scaling-l1-1-1

SetProcessDpiAwareness GetDpiForMonitor

api-ms-win-ntuser-sysparams-l1-1-0

GetSystemMetrics SystemParametersInfoW GetMonitorInfoW

api-ms-win-core-processthreads-l1-1-3

SetThreadDescription

api-ms-win-core-shlwapi-legacy-l1-1-0

PathFileExistsW

api-ms-win-core-heap-obsolete-l1-1-0

GlobalUnlock GlobalLock GlobalSize

api-ms-win-core-heap-l2-1-0

GlobalFree LocalFree GlobalAlloc

api-ms-win-core-largeinteger-l1-1-0

MulDiv

api-ms-win-core-registry-l1-1-0

RegEnumValueW RegCloseKey RegOpenCurrentUser RegGetValueW RegQueryValueExW

api-ms-win-core-sysinfo-l1-1-0

GetSystemDirectoryW GetSystemInfo GetTickCount64 GetSystemTimeAsFileTime GetWindowsDirectoryW

ext-ms-win-uiacore-l1-1-1

UiaRaiseAutomationEvent UiaGetReservedNotSupportedValue UiaGetReservedMixedAttributeValue

propsys

PropVariantToBoolean PropVariantToUInt32 PropVariantToInt16

api-ms-win-shell-namespace-l1-1-0

SHCreateItemFromParsingName

api-ms-win-core-path-l1-1-0

PathCchRemoveExtension

api-ms-win-core-registry-l2-1-0

RegCreateKeyW RegOpenKeyW

api-ms-win-core-realtime-l1-1-0

QueryUnbiasedInterruptTime

api-ms-win-core-processthreads-l1-1-1

OpenProcess IsProcessorFeaturePresent

api-ms-win-core-psapi-l1-1-0

K32GetModuleFileNameExW

api-ms-win-core-namedpipe-l1-1-0

CreatePipe

api-ms-win-shcore-obsolete-l1-1-0

CommandLineToArgvW

api-ms-win-core-file-l1-1-0

WriteFile FindClose ReadFile FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW CreateFileW

api-ms-win-core-sidebyside-l1-1-0

CreateActCtxW

api-ms-win-core-rtlsupport-l1-1-0

RtlUnwindEx RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind RtlPcToFileHeader

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter QueryPerformanceFrequency

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

user32

SetScrollInfo GetWindowRect SetLayeredWindowAttributes IsZoomed GetDpiForWindow OffsetRect SetWindowLongW GetCursorPos GetClientRect SetWindowPos ClientToScreen PostMessageW DestroyIcon PrivateExtractIconsW TrackPopupMenuEx SetActiveWindow SendMessageTimeoutW SetWindowTextW BeginPaint EndPaint LoadCursorW DialogBoxParamW EndDialog SetForegroundWindow SendNotifyMessageW EnableScrollBar IsDlgButtonChecked GetDlgItemTextW SendDlgItemMessageW SetDlgItemTextW CopyImage GetIconInfo UnhookWindowsHookEx DispatchMessageW GetMessageW CheckDlgButton SetWindowsHookExW ReleaseCapture SetCapture ScreenToClient ToUnicodeEx GetKeyboardState GetCaretBlinkTime CheckRadioButton GetWindowLongW GetSystemMenu SetClipboardData GetWindowInfo MonitorFromWindow MonitorFromRect NotifyWinEvent MapVirtualKeyW VkKeyScanW DestroyWindow RegisterClassExW CreateWindowExW GetKeyState GetKeyboardLayout SetWindowLongPtrW IsIconic OpenClipboard GetClipboardData EmptyClipboard CloseClipboard LoadMenuW AppendMenuW SetMenuItemInfoW RegisterClipboardFormatW GetWindowThreadProcessId GetForegroundWindow LoadImageW EnableMenuItem LoadIconW SendMessageW IsWindow GetDoubleClickTime GetDC ShowWindow GetWindowLongPtrW DefWindowProcW SetFocus MapWindowPoints ReleaseDC ShowWindowAsync SetTimer KillTimer GetSysColor FillRect ScrollDC ScrollWindowEx InvertRect IsWindowVisible AdjustWindowRectEx

gdi32

GetTextFaceW AddFontMemResourceEx SetStretchBltMode ModifyWorldTransform SetWorldTransform SetBkColor SetDCBrushColor SelectObject GetTextMetricsW GetOutlineTextMetricsW GetStockObject TranslateCharsetInfo CreateFontIndirectW CreateFontIndirectA GetCharABCWidthsW GetObjectW RemoveFontMemResourceEx GetGlyphIndicesW CreateCompatibleBitmap BitBlt GdiFlush ExtTextOutW PatBlt MoveToEx LineTo SetGraphicsMode SelectClipRgn IntersectClipRect GetTextExtentPoint32W PolyBezier CreateSolidBrush ExtCreatePen StretchDIBits GetCharWidth32W CreateCompatibleDC DeleteDC SetTextColor DeleteObject

shell32

DragQueryFileW DragFinish ord102

winmm

PlaySoundW

imm32

ImmDisableIME

api-ms-win-crt-heap-l1-1-0

_aligned_malloc calloc _callnewh _set_new_mode _aligned_free malloc free

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func _configthreadlocale

api-ms-win-core-memory-l1-1-0

VirtualFree VirtualProtect VirtualQuery VirtualAlloc

d2d1

ord1

dwrite

DWriteCreateFactory

dxgi

CreateDXGIFactory2

d3d11

D3D11CreateDevice

d3dcompiler_47

D3DReflect D3DCompileFromFile

api-ms-win-core-version-l1-1-0

VerQueryValueW

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-core-file-l1-2-2

AreFileApisANSI

api-ms-win-core-file-l2-1-0

GetFileInformationByHandleEx

Name

.text

Size

828KB

Virtual Size

827KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

206KB

Virtual Size

206KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

34KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-23_276c84193cba906c90d565324f12110e_akira

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-winrt-error-l1-1-0

api-ms-win-eventing-provider-l1-1-0

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-util-l1-1-0

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-synch-l1-2-0

ntdll

usp10

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-core-threadpool-l1-2-0

ext-ms-win-uiacore-l1-1-0

oleaut32

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-shcore-scaling-l1-1-1

api-ms-win-ntuser-sysparams-l1-1-0

api-ms-win-core-processthreads-l1-1-3

api-ms-win-core-shlwapi-legacy-l1-1-0

api-ms-win-core-heap-obsolete-l1-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-largeinteger-l1-1-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

ext-ms-win-uiacore-l1-1-1

propsys

api-ms-win-shell-namespace-l1-1-0

api-ms-win-core-path-l1-1-0

api-ms-win-core-registry-l2-1-0

api-ms-win-core-realtime-l1-1-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-psapi-l1-1-0

api-ms-win-core-namedpipe-l1-1-0

api-ms-win-shcore-obsolete-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-sidebyside-l1-1-0

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-interlocked-l1-1-0

user32

gdi32

shell32

winmm

imm32

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-core-memory-l1-1-0

d2d1

dwrite

dxgi

d3d11

d3dcompiler_47

api-ms-win-core-version-l1-1-0

api-ms-win-core-io-l1-1-0

api-ms-win-core-file-l1-2-2

api-ms-win-core-file-l2-1-0

generic