Analysis
- max time kernel
148s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
13/09/2026, 18:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-13_019d4da2e276fd09d28f33db8b0e4c69_akira_elex.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_019d4da2e276fd09d28f33db8b0e4c69_akira_elex.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target 2026-09-13_019d4da2e276fd09d28f33db8b0e4c69_akira_elex.exe
- Size 8.8MB
- Sample260913-w55wbsvsdv
- SHA256 983076ffa5a03d9d76fe9363e59ea1f5c1b065a67ad9c9c3ea411c45832635f1
- MD5 019d4da2e276fd09d28f33db8b0e4c69
- SHA1 8f08411d7e9148e8aa6556d30d2b91cb850c004f
- SHA512 026564a3aa0356d6140e7c072a9c950abfc30372f7f19388c4df23dfca29f2f71a039f1f3061de9d43394ef02ef5889f213c45baa54c4b9b856d9f89a3e6558b
- SSDEEP 98304:Ulk5vuX3+IaM6LHFsoTaiar5wnGi2ZC1EZhyKEtgLw8tS6:Ulk5Q+6q+C5ar5wGiMhXEGJtp
- TLSH T16B967C529EE66ABEC29352301C766A14F9390D34470C8FF7E2C3CDAD1676AF91DB6006
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-09-13_019d4da2e276fd09d28f33db8b0e4c69_akira_elex.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 6108 2026-09-13_019d4da2e276fd09d28f33db8b0e4c69_akira_elex.exe 6108 2026-09-13_019d4da2e276fd09d28f33db8b0e4c69_akira_elex.exe - Suspicious behavior: LoadsDriver 6 IoCs
pid Process 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 812 Process not Found
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-13_019d4da2e276fd09d28f33db8b0e4c69_akira_elex.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-13_019d4da2e276fd09d28f33db8b0e4c69_akira_elex.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:6108
-
C:\Windows\System32\rasphone.exeC:\Windows\System32\rasphone.exe -f "C:\Users\Public\3DC566FE035BE190.pbk" -d "PoCEntry"1⤵PID:4296
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\Search\e40027542012083c\ost.exe
- Size 100.0MB
- SHA256 75b21c66e14affd8e896db31da1c6921e002b1e1839ff688c36cb260fbd56bf4
- MD5 7e88626628709f3a6b68c27c3bf1e884
- SHA1 f96a55a02eed645758ec4b9ef5ba87a3a03cd651
- SHA512 02619d816b80e1bcb9855079710f283f8f7097f952e62ad49fb78f76d20be884b1b06280f1325c2698015d10c581218e5aa55611c577bc1fd952379e86d5731f
- SSDEEP 1572864:CokhVplNj4hpT/804S1H01ScfWj85aGGivyQtjd237kTBeUO18YJUJIIkhdqPbBE:3khX4T+o01ScOQGiF28suYy+hQPTS
- TLSH T1D93823529AE669BFC29352301C766A14F9390D38470C8FF3E2C7CDAD1676AF91DB6006
- MD5 SHA1 SHA512 SSDEEP TLSH