2026-08-08_b3fc274c7b8e888332ecf2a9d5a00e40_akira

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_b3fc274c7b8e888332ecf2a9d5a00e40_akira
Size 386KB
Sample260808-lscnxadj21
SHA256 cd14a535f45a2d8a3087fa1bd39c1a841ee195d6fee79e728b87d1c7c614da06
MD5 b3fc274c7b8e888332ecf2a9d5a00e40
SHA1 769b7f67013442ed3caa7ba3fe6a578cbf6eabc7
SHA512 bc26b2e306c48b87165c5c9699437144c76de28ba2889a2da36202404a41d0da19a5c6bbb54379c91a46fd45f80c4f4f5791177756751d1da4e761ee7f4a4082
SSDEEP 6144:JmTmXgXzziQAYnDxlAvAjsDAVRQhvRJW5+nJDh3yNNsHXNzzY7zkH:wTIgXP6vAYDgQvRJW0nJDwk9JH
TLSH
T1CB847D43B69591FCD156C038939B9573B633B88A0631BDBF13E896302F66E512F2CB19
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Signatures

Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_Binary_Embedded_Crypto_Wallet_Browser_Extension_IDs

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_b3fc274c7b8e888332ecf2a9d5a00e40_akira

File Explorer

2026-08-08_b3fc274c7b8e888332ecf2a9d5a00e40_akira

.exe 386KB

2026-08-08_b3fc274c7b8e888332ecf2a9d5a00e40_akira

IMPHASH 9018f7a96c3848945711c74e2a818d62
SHA256 cd14a535f45a2d8a3087fa1bd39c1a841ee195d6fee79e728b87d1c7c614da06
MD5 b3fc274c7b8e888332ecf2a9d5a00e40
SHA1 769b7f67013442ed3caa7ba3fe6a578cbf6eabc7
SHA512 bc26b2e306c48b87165c5c9699437144c76de28ba2889a2da36202404a41d0da19a5c6bbb54379c91a46fd45f80c4f4f5791177756751d1da4e761ee7f4a4082
SSDEEP 6144:JmTmXgXzziQAYnDxlAvAjsDAVRQhvRJW5+nJDh3yNNsHXNzzY7zkH:wTIgXP6vAYDgQvRJW0nJDwk9JH
TLSH
T1CB847D43B69591FCD156C038939B9573B633B88A0631BDBF13E896302F66E512F2CB19
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5120

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC DeleteDC DeleteObject GetDIBits SelectObject

kernel32

AddVectoredExceptionHandler CancelIo CloseHandle CompareStringOrdinal CreateEventW CreateFileMappingA CreateFileW CreateProcessW CreateThread CreateToolhelp32Snapshot DuplicateHandle FindClose FindFirstFileExW FindNextFileW FormatMessageW FreeEnvironmentStringsW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOverlappedResult GetProcAddress GetProcessHeap GetStdHandle GetSystemDirectoryW GetWindowsDirectoryW GlobalMemoryStatusEx HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete MapViewOfFile Module32FirstW Module32NextW MultiByteToWideChar ReadFile ReadFileEx RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetFileInformationByHandle SetFileTime SetLastError SetThreadStackGuarantee SetUnhandledExceptionFilter Sleep SleepEx TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile WaitForMultipleObjects WaitForSingleObject WriteConsoleW WriteFileEx DeleteCriticalSection EnterCriticalSection InitializeCriticalSection LeaveCriticalSection RaiseException RtlUnwindEx VirtualProtect VirtualQuery __C_specific_handler

ntdll

NtOpenFile NtReadFile NtWriteFile RtlNtStatusToDosError NtCreateNamedPipeFile

user32

GetDC GetSystemMetrics ReleaseDC

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

msvcrt

__getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _fmode _fpreset _initterm abort atexit calloc exit fprintf free malloc memcmp memcpy memmove memset signal strlen strncmp vfprintf

Name

.text

Size

307KB

Virtual Size

306KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

47KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_b3fc274c7b8e888332ecf2a9d5a00e40_akira

gdi32

kernel32

ntdll

user32

api-ms-win-core-synch-l1-2-0

msvcrt

generic