General

  • Target
    2026-10-16_138c8a2c4127f41feb07aec9cdb71964_akira_elex
  • Size 7.7MB
  • Sample261017-3bf4faey3y
  • SHA256 df620ddd710cb7bdae2261ed68e209d3e8122001ff9213aa0865573dad1d02ea
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-10-16_138c8a2c4127f41feb07aec9cdb71964_akira_elex
    • Size 7.7MB
    • SHA256 df620ddd710cb7bdae2261ed68e209d3e8122001ff9213aa0865573dad1d02ea
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detect binaries embedding considerable number of MFA browser extension IDs.

    • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.

    • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers

    • Detects executables containing bas64 encoded gzip files

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v16

Tasks