2026-08-08_6da1ce1eb77d08867cb35dfc9c761053_akira_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_6da1ce1eb77d08867cb35dfc9c761053_akira_conti
Size 896KB
Sample260808-dysnbabe24
SHA256 56b522e5855371a3cdd72a9f140f64c592fed3e7dfc1950c51f037581b7223ec
MD5 6da1ce1eb77d08867cb35dfc9c761053
SHA1 986b7ba3dac9b4abbe15bb8083f0a7474bb929d5
SHA512 503af8f718b287c2c36c864b05b08950cb206464ec00b712332e5321255eb11aedb1f508f2437bd781bb8dd7c702e45224e7ba7cf22b05389991a89a32343d37
SSDEEP 12288:drQwAeoIMq6f1UqKGq71wiWK21LEXHz2rI3cv7xIp5ck3uyfuWlXgqsQSTr4/HVZ:d+UISGq7ltzHSM30Gp59hGJQg4v0iYI
TLSH
T11915CFB976043CE9E62FC17ADB56ACEA137236534A87A8DE40B4B7D20963771FF05804
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_6da1ce1eb77d08867cb35dfc9c761053_akira_conti

File Explorer

2026-08-08_6da1ce1eb77d08867cb35dfc9c761053_akira_conti

.exe 896KB

2026-08-08_6da1ce1eb77d08867cb35dfc9c761053_akira_conti

IMPHASH ec77616c487a6f56047917b8e5a15f68
SHA256 56b522e5855371a3cdd72a9f140f64c592fed3e7dfc1950c51f037581b7223ec
MD5 6da1ce1eb77d08867cb35dfc9c761053
SHA1 986b7ba3dac9b4abbe15bb8083f0a7474bb929d5
SHA512 503af8f718b287c2c36c864b05b08950cb206464ec00b712332e5321255eb11aedb1f508f2437bd781bb8dd7c702e45224e7ba7cf22b05389991a89a32343d37
SSDEEP 12288:drQwAeoIMq6f1UqKGq71wiWK21LEXHz2rI3cv7xIp5ck3uyfuWlXgqsQSTr4/HVZ:d+UISGq7ltzHSM30Gp59hGJQg4v0iYI
TLSH
T11915CFB976043CE9E62FC17ADB56ACEA137236534A87A8DE40B4B7D20963771FF05804
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

DeleteCriticalSection EnterCriticalSection InitializeCriticalSection LeaveCriticalSection RaiseException RtlUnwindEx VirtualProtect VirtualQuery __C_specific_handler AddVectoredExceptionHandler CloseHandle CreateFileMappingA CreateFileW CreateToolhelp32Snapshot DuplicateHandle FormatMessageW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentThread GetCurrentThreadId GetEnvironmentVariableA GetEnvironmentVariableW GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetLastError GetModuleHandleA GetProcAddress GetProcessHeap GetStdHandle GetVersionExA HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete IsDebuggerPresent LoadLibraryExA MapViewOfFile Module32FirstW Module32NextW MultiByteToWideChar OpenThread Process32FirstW Process32NextW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetLastError SetThreadStackGuarantee SetUnhandledExceptionFilter Sleep Thread32First Thread32Next TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile WaitForSingleObject WriteConsoleW

msvcrt

__getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _fmode _fpreset _initterm atexit abort calloc exit fflush fprintf free malloc memcmp memcpy memmove memset setvbuf signal strlen strncmp vfprintf

advapi32

CryptAcquireContextA CryptCreateHash CryptDestroyHash CryptGetHashParam CryptHashData CryptReleaseContext

ntdll

NtWriteFile RtlNtStatusToDosError

oleaut32

SysFreeString SysStringLen

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

Name

.text

Size

203KB

Virtual Size

203KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

667KB

Virtual Size

666KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

720B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_6da1ce1eb77d08867cb35dfc9c761053_akira_conti

kernel32

msvcrt

advapi32

ntdll

oleaut32

api-ms-win-core-synch-l1-2-0

generic