Analysis
- max time kernel
148s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/10/2026, 12:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_714c32ecf10c694c100fa9525822f507_akira.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_714c32ecf10c694c100fa9525822f507_akira.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target 2026-09-30_714c32ecf10c694c100fa9525822f507_akira.exe
- Size 4.5MB
- Sample261001-ph3n5abf55
- SHA256 c132e47a778a9961135c6167322491181857b7f048d76835654196d299cb248a
- MD5 714c32ecf10c694c100fa9525822f507
- SHA1 bd55bcdc2bc1bf6e2ad8c11a0d5b1481d0397202
- SHA512 07c082a4aeb841e42fc70f4000a218eac15b437475981eb803c3946b5484b28cc67dabdfe1285902d8cbbbc627b72f6b8040ea34d6d2079070013d597306c224
- SSDEEP 49152:ZUbElXcRu4qPyoJtB0n8doUViElVazjAwxWGATU4Bxyj6s1dinojBrz8Xje:uA/SM
- TLSH T1EE26744BD73A61DDC6BFC03956536332F9603C9C41397F339F918B622A24B60A96E724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2580 2026-09-30_714c32ecf10c694c100fa9525822f507_akira.exe 2580 2026-09-30_714c32ecf10c694c100fa9525822f507_akira.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 2580 wrote to memory of 5740 2580 2026-09-30_714c32ecf10c694c100fa9525822f507_akira.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-30_714c32ecf10c694c100fa9525822f507_akira.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-30_714c32ecf10c694c100fa9525822f507_akira.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2580 -
C:\Windows\SYSTEM32\rundll32.exerundll32.exe2⤵PID:5740
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Windows\Temp\kr_step06.txt
- Size 134B
- SHA256 d4e1c9d85d7238768750213b3b4ea98e76b8d951b89d57aaa6ff5ca7f160c396
- MD5 5cc3d64558a763b073398ccdb0a2d8f1
- SHA1 b2d073b29d7a9f87d5f610d23bb848a04b203a0f
- SHA512 fd432419bef3201001c81909b2874d5b7b0a8ecc05f41ea094824c3a52b057de4f8906dcc695c9f0df3fb1c963c4d61551d7ad29530708e46a4ee42876b6afe8
- TLSH T191C0929242A046B0C291840C6720A9EAA60A10F16403DB06C4E8B6A88E8312C3E8CE2C
- MD5 SHA1 SHA512 TLSH