d0362baea6c5d136a7e80f059541bc57b1d9458832a59cabdecaeeb00e432bcc

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/10/2026, 22:50

Target
2026-10-12_b049159706bc8fabcc86f161a06f1b5d_akira.exe
Size 1.3MB
Sample261013-2sp71adf39
SHA256 d0362baea6c5d136a7e80f059541bc57b1d9458832a59cabdecaeeb00e432bcc
MD5 b049159706bc8fabcc86f161a06f1b5d
SHA1 c6afadecbfcc0dcd27b4658fde1b8f3fd44acc79
SHA512 c7e9efb412bb8d0f62e053b2d99f0cece86ac4da7fd0f4a738b9b5687c2f2610240ec89ae1886edf261e1fd12853b3dc1e5912b192a8c1705f14f9b58d1e9889
SSDEEP 24576:ZmndgCNMCtNV02yG6f43wRteVvnAswpDeVklqNPE/ns4pptmtfxqKxqMBIEE/m4+:ZIdfNMCtNyBMA0cIktC09/mbElfW
TLSH
T1F355AD0BB201F71BEC4FB2707A794A6FA1A7FB47103854FA13C6611C6AE5F391A6C650
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4116 set thread context of 3440	4116	2026-10-12_b049159706bc8fabcc86f161a06f1b5d_akira.exe	89

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 4116 wrote to memory of 3440	4116	2026-10-12_b049159706bc8fabcc86f161a06f1b5d_akira.exe	89
PID 4116 wrote to memory of 3440	4116	2026-10-12_b049159706bc8fabcc86f161a06f1b5d_akira.exe	89
PID 4116 wrote to memory of 3440	4116	2026-10-12_b049159706bc8fabcc86f161a06f1b5d_akira.exe	89
PID 4116 wrote to memory of 3440	4116	2026-10-12_b049159706bc8fabcc86f161a06f1b5d_akira.exe	89
PID 4116 wrote to memory of 3440	4116	2026-10-12_b049159706bc8fabcc86f161a06f1b5d_akira.exe	89
PID 4116 wrote to memory of 3440	4116	2026-10-12_b049159706bc8fabcc86f161a06f1b5d_akira.exe	89
PID 4116 wrote to memory of 3440	4116	2026-10-12_b049159706bc8fabcc86f161a06f1b5d_akira.exe	89
PID 4116 wrote to memory of 3440	4116	2026-10-12_b049159706bc8fabcc86f161a06f1b5d_akira.exe	89
PID 4116 wrote to memory of 3440	4116	2026-10-12_b049159706bc8fabcc86f161a06f1b5d_akira.exe	89
PID 4116 wrote to memory of 3440	4116	2026-10-12_b049159706bc8fabcc86f161a06f1b5d_akira.exe	89
PID 4116 wrote to memory of 3440	4116	2026-10-12_b049159706bc8fabcc86f161a06f1b5d_akira.exe	89

C:\Users\Admin\AppData\Local\Temp\2026-10-12_b049159706bc8fabcc86f161a06f1b5d_akira.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-12_b049159706bc8fabcc86f161a06f1b5d_akira.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:4116
- C:\Windows\System32\msiexec.exe
  C:\Windows\System32\msiexec.exe
  2⤵
  PID:3440

memory/4116-0-0x00007FF6B7F30000-0x00007FF6B7F76000-memory.dmp

Download

memory/4116-2-0x00007FF6B7F30000-0x00007FF6B7F76000-memory.dmp

Download