General
- Target Akira (OLD).exe
- Size 5.4MB
- Sample261014-2fc2xaay2p
- SHA256 5f892b6444c7bb91e1ce1e546e9df7ee984b43caec40926aa0390dd88824a2e1
- MD5 5e506f9a56f2cc676dedc9dc171e358d
- SHA1 287dbb3d7fe83f2baff2701df9abaf2edecc1b93
- SHA512 8ba936e3995248202569564ff059f232b59949c3a9e7e74fcbdfcc74499c637eb671b19e0d9596c864d8baa99b0524ebed6c3e59cd59af90a210d4c2c6e9c80f
- SSDEEP 49152:9PBEenep7yTwv0wSoSThu8m+vmOC16a5VE9eIAEk1kWduoGnK09gafdlF:Xn0pShu8m+vmOWk9e1D1XFydlF
- TLSH T134468D6A7AC5805DD17BB27D888B6BC7C53630C24B1257CF1360076A2F7BAE41E79B60
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Akira (OLD).exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Akira (OLD).exe
- Size 5.4MB
- SHA256 5f892b6444c7bb91e1ce1e546e9df7ee984b43caec40926aa0390dd88824a2e1
- MD5 5e506f9a56f2cc676dedc9dc171e358d
- SHA1 287dbb3d7fe83f2baff2701df9abaf2edecc1b93
- SHA512 8ba936e3995248202569564ff059f232b59949c3a9e7e74fcbdfcc74499c637eb671b19e0d9596c864d8baa99b0524ebed6c3e59cd59af90a210d4c2c6e9c80f
- SSDEEP 49152:9PBEenep7yTwv0wSoSThu8m+vmOC16a5VE9eIAEk1kWduoGnK09gafdlF:Xn0pShu8m+vmOWk9e1D1XFydlF
- TLSH T134468D6A7AC5805DD17BB27D888B6BC7C53630C24B1257CF1360076A2F7BAE41E79B60
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.