2026-08-08_b63f29e7768bef83e2a6b33da764b385_akira

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_b63f29e7768bef83e2a6b33da764b385_akira
Size 601KB
Sample260808-dcymfabc93
SHA256 0c9d3755f7157ee428cccc43c2497daae05b9fc3d9667ede6806356596319740
MD5 b63f29e7768bef83e2a6b33da764b385
SHA1 4e024d2de572331cfa493f53813ca34ebe956860
SHA512 16276af1884708e5fca22a72df6e4ee87ca048d158df39bcf8f3a2ca7552d4dfd8fd2965505bc21c3e2148f9187da430577673b82cfeb4380d5ae7687f99f1b1
SSDEEP 12288:bwdak8b5WyNFwOBXldqjdZRRelu0vizx3f/Jw9mCcMpT+:bwdaktRmu8i93fmXFpT
TLSH
T1F8D45C57F6A2D1BCD12AC075935A9173FB32B88A06327EBB13E487343E65E506B1DB04
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Signatures

Detects ransomware indicator 1 IoCs

resource	yara_rule
sample	SUSP_RANSOMWARE_Indicator_Jul20

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_b63f29e7768bef83e2a6b33da764b385_akira

File Explorer

2026-08-08_b63f29e7768bef83e2a6b33da764b385_akira

.exe 601KB

2026-08-08_b63f29e7768bef83e2a6b33da764b385_akira

IMPHASH 77bba8c673274062271cc94f7e767c15
SHA256 0c9d3755f7157ee428cccc43c2497daae05b9fc3d9667ede6806356596319740
MD5 b63f29e7768bef83e2a6b33da764b385
SHA1 4e024d2de572331cfa493f53813ca34ebe956860
SHA512 16276af1884708e5fca22a72df6e4ee87ca048d158df39bcf8f3a2ca7552d4dfd8fd2965505bc21c3e2148f9187da430577673b82cfeb4380d5ae7687f99f1b1
SSDEEP 12288:bwdak8b5WyNFwOBXldqjdZRRelu0vizx3f/Jw9mCcMpT+:bwdaktRmu8i93fmXFpT
TLSH
T1F8D45C57F6A2D1BCD12AC075935A9173FB32B88A06327EBB13E487343E65E506B1DB04
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Detects ransomware indicator
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

DeleteCriticalSection EnterCriticalSection InitializeCriticalSection LeaveCriticalSection RaiseException RtlUnwindEx VirtualProtect VirtualQuery __C_specific_handler CloseHandle CopyFileExW DeleteFileW DuplicateHandle FindClose FindFirstFileExW FindNextFileW GetConsoleMode GetConsoleOutputCP GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetLastError GetStdHandle GetSystemDirectoryW GetSystemInfo GetTempPathW GetWindowsDirectoryW MoveFileExW SetFileInformationByHandle SetFileTime SetLastError WriteConsoleW AddVectoredExceptionHandler CompareStringOrdinal CreateFileMappingA CreateFileW CreateProcessW CreateThread CreateToolhelp32Snapshot CreateWaitableTimerExW DeviceIoControl FormatMessageW FreeEnvironmentStringsW GetCommandLineW GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessHeap HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete MapViewOfFile Module32FirstW Module32NextW MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency ReadFileEx RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetThreadStackGuarantee SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepEx SwitchToThread TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile WaitForSingleObject WriteFileEx

api-ms-win-crt-environment-l1-1-0

__p__environ __p__wenviron

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-private-l1-1-0

memcmp memcpy memmove

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv __p___wargv _cexit _configure_narrow_argv _configure_wide_argv _crt_at_quick_exit _crt_atexit _exit _fpreset _initialize_narrow_environment _initialize_wide_environment _initterm _set_app_type _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vfwprintf fwrite

api-ms-win-crt-string-l1-1-0

memset strlen strncmp

api-ms-win-crt-time-l1-1-0

__daylight __timezone __tzname _tzset

ntdll

NtCreateNamedPipeFile RtlNtStatusToDosError NtOpenFile NtReadFile NtWriteFile

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

advapi32

CloseServiceHandle ControlService CreateServiceW DeleteService OpenSCManagerW OpenServiceW RegCloseKey RegCreateKeyExW RegDeleteValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW StartServiceW SystemFunction036

bcrypt

BCryptGenRandom

mpr

WNetCloseEnum WNetEnumResourceW WNetOpenEnumW

psapi

EnumDeviceDrivers GetDeviceDriverBaseNameW

user32

SystemParametersInfoW

Name

.text

Size

453KB

Virtual Size

452KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

109KB

Virtual Size

108KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

544B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_b63f29e7768bef83e2a6b33da764b385_akira

kernel32

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

ntdll

api-ms-win-core-synch-l1-2-0

advapi32

bcrypt

mpr

psapi

user32

generic