2026-10-22_78cb0208fb4aa0206673e3d5377fdc25_akira

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_78cb0208fb4aa0206673e3d5377fdc25_akira
Size 1.0MB
Sample261024-jvdb4see74
SHA256 f3dfa157258334ebc64b4e6a126c56b8052b23b1adf7b2eeae3f106604f42330
MD5 78cb0208fb4aa0206673e3d5377fdc25
SHA1 593dc497bdf9029ffc341f3186787f38f7c21442
SHA512 4d88847d0344b8dfbdd25a753e0050173432d64bf3875720782e6079704fb40dada935bc5bb3d7192e4a657216f12d8b9ef023ad87356954e408f9213b605117
SSDEEP 24576:Dze5iaXeXNr5ftUpBn+ZIW3n0OV1s8+yGKFme:XaiaXiNVAaV30OckGKFN
TLSH
T1B1356B5AA6A905E8D47FD0B8C943C91BF6B17C5203718BCB46E08A562F677E06F3E311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-10-22_78cb0208fb4aa0206673e3d5377fdc25_akira

.exe 1.0MB

2026-10-22_78cb0208fb4aa0206673e3d5377fdc25_akira

IMPHASH cbd38f56868867938d394550ffbb227e
SHA256 f3dfa157258334ebc64b4e6a126c56b8052b23b1adf7b2eeae3f106604f42330
MD5 78cb0208fb4aa0206673e3d5377fdc25
SHA1 593dc497bdf9029ffc341f3186787f38f7c21442
SHA512 4d88847d0344b8dfbdd25a753e0050173432d64bf3875720782e6079704fb40dada935bc5bb3d7192e4a657216f12d8b9ef023ad87356954e408f9213b605117
SSDEEP 24576:Dze5iaXeXNr5ftUpBn+ZIW3n0OV1s8+yGKFme:XaiaXiNVAaV30OckGKFN
TLSH
T1B1356B5AA6A905E8D47FD0B8C943C91BF6B17C5203718BCB46E08A562F677E06F3E311
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

06:4a:ea:23:12:d5:df:81:1d:d5:35:3c:75:2e:a7:e4:dd:6d:05:5b:b8:1b:74:fc:54:a7:21:3b:ed:b2:0b:e6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 19, 2026

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

06:4a:ea:23:12:d5:df:81:1d:d5:35:3c:75:2e:a7:e4:dd:6d:05:5b:b8:1b:74:fc:54:a7:21:3b:ed:b2:0b:e6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Mar 4, 2026

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:04:84:98:e2:12:e0:78:a3:31:5d:00:00:00:00:04:84

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 19, 2025 - Jun 17, 2026

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:431A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:1d:4b:c0:92:87:38:85:7e:39:00:01:00:00:02:1d

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Aug 14, 2025 - Nov 13, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 30, 2021 - Sep 30, 2030

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:1c:fa:cd:c5:9b:e8:2f:7e:c4:00:00:00:00:02:1c

Issuer

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 16, 2026 - Apr 15, 2027

Subject

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 8, 2024 - Mar 22, 2036

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:6F1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:1c:09:55:15:d7:c3:59:07:d1:00:01:00:00:02:1c

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Aug 14, 2025 - Nov 13, 2026

Minor OS version

Major OS version

Entry point

143120

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\__w\1\s\bin\x64\Release\OpenConsole.pdb

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW GetModuleFileNameW GetProcAddress FreeLibrary GetModuleFileNameA LoadStringW LockResource LoadLibraryExA GetModuleHandleExW LoadResource FindResourceExW LoadLibraryExW

api-ms-win-core-synch-l1-1-0

CreateEventExW ReleaseMutex AcquireSRWLockExclusive WaitForSingleObjectEx ReleaseSRWLockExclusive InitializeCriticalSectionAndSpinCount CreateMutexExW ResetEvent DeleteCriticalSection ReleaseSemaphore SetEvent CreateSemaphoreExW ReleaseSRWLockShared InitializeCriticalSectionEx OpenSemaphoreW AcquireSRWLockShared WaitForSingleObject

api-ms-win-core-heap-l1-1-0

HeapAlloc GetProcessHeap HeapFree

api-ms-win-core-errorhandling-l1-1-0

SetLastError RaiseException GetLastError SetUnhandledExceptionFilter UnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-0

ExitProcess TlsFree TerminateProcess ExitThread SetProcessShutdownParameters CreateThread GetProcessTimes OpenProcessToken CreateProcessW TlsAlloc TlsGetValue GetCurrentProcess GetCurrentProcessId TlsSetValue GetCurrentThreadId DeleteProcThreadAttributeList GetStartupInfoW InitializeProcThreadAttributeList UpdateProcThreadAttribute

api-ms-win-core-localization-l1-2-0

FormatMessageA FormatMessageW GetACP LCMapStringW IsValidCodePage GetLocaleInfoEx GetUserDefaultLocaleName GetOEMCP GetCPInfo

api-ms-win-core-debug-l1-1-0

OutputDebugStringW IsDebuggerPresent DebugBreak

api-ms-win-core-handle-l1-1-0

DuplicateHandle CloseHandle

api-ms-win-core-string-l1-1-0

CompareStringOrdinal MultiByteToWideChar WideCharToMultiByte

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW RoOriginateError

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer EventSetInformation EventRegister EventUnregister

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW SearchPathW GetEnvironmentVariableW SetEnvironmentVariableW GetStdHandle GetCommandLineW

api-ms-win-core-com-l1-1-0

CoUninitialize CoTaskMemAlloc CoCreateInstance CoInitializeEx CoReleaseServerProcess IIDFromString CoTaskMemFree CoAddRefServerProcess CoRevokeClassObject CoRegisterClassObject CoResumeClassObjects

api-ms-win-core-util-l1-1-0

DecodePointer EncodePointer

api-ms-win-core-winrt-l1-1-0

RoRevokeActivationFactories RoRegisterActivationFactories

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString WindowsGetStringRawBuffer WindowsStringHasEmbeddedNull WindowsDeleteString WindowsIsStringEmpty

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll InitOnceExecuteOnce Sleep SleepConditionVariableSRW WakeAllConditionVariable WakeByAddressSingle

ntdll

NtQueryVolumeInformationFile NtQueryInformationFile

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function abort _initialize_onexit_table _register_thread_local_exe_atexit_callback _c_exit _crt_atexit _exit terminate exit _invoke_watson _errno _initterm_e _cexit _seh_filter_exe _initterm _invalid_parameter_noinfo _get_wide_winmain_command_line _set_app_type _initialize_wide_environment _configure_wide_argv

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf _set_fmode __stdio_common_vswprintf_s __p__commode __stdio_common_vsprintf_s

api-ms-win-crt-string-l1-1-0

wcsnlen towlower wcscpy_s wcsncmp strcpy_s strlen strcmp

api-ms-win-crt-convert-l1-1-0

wcstoul wcstol

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolWaitCallbacks CreateThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer SetThreadpoolTimer CreateThreadpoolWait SetThreadpoolWait CloseThreadpoolWait

ext-ms-win-uiacore-l1-1-0

UiaHostProviderFromHwnd UiaReturnRawElementProvider

oleaut32

SysFreeString SysAllocString SafeArrayCreateVector SafeArrayPutElement SafeArrayDestroy SysStringLen VariantInit VariantClear

api-ms-win-shcore-scaling-l1-1-1

SetProcessDpiAwareness GetDpiForMonitor

api-ms-win-ntuser-sysparams-l1-1-0

SystemParametersInfoW GetSystemMetrics GetMonitorInfoW

api-ms-win-core-shlwapi-legacy-l1-1-0

PathFileExistsW

api-ms-win-core-heap-obsolete-l1-1-0

GlobalUnlock GlobalSize GlobalLock

api-ms-win-core-heap-l2-1-0

GlobalFree LocalFree GlobalAlloc

api-ms-win-core-largeinteger-l1-1-0

MulDiv

api-ms-win-core-registry-l1-1-0

RegCloseKey RegQueryValueExW RegGetValueW RegEnumValueW RegOpenCurrentUser

api-ms-win-core-sysinfo-l1-1-0

GetSystemDirectoryW GetTickCount64 GetSystemInfo GetWindowsDirectoryW GetSystemTimeAsFileTime

ext-ms-win-uiacore-l1-1-1

UiaRaiseAutomationEvent UiaGetReservedMixedAttributeValue UiaGetReservedNotSupportedValue

propsys

PropVariantToInt16 PropVariantToBoolean PropVariantToUInt32

api-ms-win-shell-namespace-l1-1-0

SHCreateItemFromParsingName

api-ms-win-core-path-l1-1-0

PathCchRemoveExtension

api-ms-win-core-registry-l2-1-0

RegCreateKeyW RegOpenKeyW

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent OpenProcess

api-ms-win-core-psapi-l1-1-0

K32GetModuleFileNameExW

api-ms-win-core-namedpipe-l1-1-0

CreatePipe

api-ms-win-shcore-obsolete-l1-1-0

CommandLineToArgvW

api-ms-win-core-file-l1-1-0

FindFirstFileW FindFirstFileExW ReadFile WriteFile FindClose CreateFileW FindNextFileW GetFileAttributesExW

api-ms-win-core-sidebyside-l1-1-0

CreateActCtxW

api-ms-win-core-rtlsupport-l1-1-0

RtlPcToFileHeader RtlCaptureContext RtlVirtualUnwind RtlLookupFunctionEntry RtlUnwindEx

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency QueryPerformanceCounter

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

user32

MapVirtualKeyExW RegisterClassExW DestroyWindow LoadKeyboardLayoutW FillRect ScrollDC ScrollWindowEx CopyImage InvertRect IsWindowVisible ReleaseDC GetDC GetKeyState VkKeyScanW MapVirtualKeyW DefWindowProcW DestroyIcon PostMessageW SendMessageW LoadIconW LoadImageW SetFocus NotifyWinEvent CloseClipboard EmptyClipboard GetClipboardData OpenClipboard CreateWindowExW SetClipboardData RegisterClipboardFormatW CheckRadioButton CheckDlgButton SetDlgItemTextW SendDlgItemMessageW SetWindowLongPtrW GetDlgItemTextW IsDlgButtonChecked EndDialog AdjustWindowRectEx DialogBoxParamW LoadCursorW GetWindowThreadProcessId SetWindowPos EnableScrollBar SetScrollInfo SetLayeredWindowAttributes IsZoomed GetDpiForWindow OffsetRect SetWindowLongW GetCursorPos GetClientRect MapWindowPoints ClientToScreen TrackPopupMenuEx SendMessageTimeoutW SetWindowTextW BeginPaint EndPaint SendNotifyMessageW GetForegroundWindow GetSystemMenu GetDoubleClickTime GetWindowLongPtrW LoadMenuW AppendMenuW SetMenuItemInfoW EnableMenuItem GetIconInfo IsWindow MonitorFromRect MonitorFromWindow GetWindowInfo GetSysColor IsWinEventHookInstalled KillTimer SetTimer ShowWindowAsync GetWindowLongW GetCaretBlinkTime GetKeyboardState ToUnicodeEx ScreenToClient GetKeyboardLayout SetCapture ReleaseCapture SetWindowsHookExW GetMessageW DispatchMessageW ShowWindow UnhookWindowsHookEx SetActiveWindow IsIconic PrivateExtractIconsW GetWindowRect

gdi32

SetTextColor SetBkColor GetCharWidth32W StretchDIBits ExtCreatePen GetTextFaceW TranslateCharsetInfo CreateSolidBrush PolyBezier GetObjectW DeleteObject AddFontMemResourceEx IntersectClipRect SelectClipRgn SetDCBrushColor SelectObject LineTo SetWorldTransform ModifyWorldTransform CreateFontIndirectA MoveToEx PatBlt SetStretchBltMode GdiFlush BitBlt CreateCompatibleBitmap GetTextMetricsW SetGraphicsMode GetGlyphIndicesW RemoveFontMemResourceEx DeleteDC GetCharABCWidthsW GetTextExtentPoint32W CreateFontIndirectW ExtTextOutW GetOutlineTextMetricsW GetStockObject CreateCompatibleDC

shell32

DragFinish ord102 DragQueryFileW

winmm

PlaySoundW

imm32

ImmDisableIME

usp10

ScriptStringOut ScriptStringAnalyse ScriptIsComplex ScriptStringFree

api-ms-win-crt-heap-l1-1-0

_aligned_malloc free malloc _set_new_mode _callnewh calloc _aligned_free

api-ms-win-crt-math-l1-1-0

__setusermatherr lround ceil ceilf floorf pow log10 powf lrintf lroundf roundf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale ___lc_codepage_func

api-ms-win-core-memory-l1-1-0

VirtualAlloc VirtualProtect VirtualQuery VirtualFree

d2d1

ord1

dwrite

DWriteCreateFactory

dxgi

CreateDXGIFactory2

d3d11

D3D11CreateDevice

d3dcompiler_47

D3DReflect D3DCompileFromFile

api-ms-win-core-libraryloader-l1-2-1

FindResourceW

api-ms-win-core-version-l1-1-0

VerQueryValueW

api-ms-win-core-realtime-l1-1-0

QueryUnbiasedInterruptTime

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-core-file-l1-2-2

AreFileApisANSI

api-ms-win-core-file-l2-1-0

GetFileInformationByHandleEx

Name

.text

Size

733KB

Virtual Size

732KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

206KB

Virtual Size

205KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

43KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_78cb0208fb4aa0206673e3d5377fdc25_akira

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-winrt-error-l1-1-0

api-ms-win-eventing-provider-l1-1-0

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-util-l1-1-0

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-synch-l1-2-0

ntdll

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-core-threadpool-l1-2-0

ext-ms-win-uiacore-l1-1-0

oleaut32

api-ms-win-shcore-scaling-l1-1-1

api-ms-win-ntuser-sysparams-l1-1-0

api-ms-win-core-shlwapi-legacy-l1-1-0

api-ms-win-core-heap-obsolete-l1-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-largeinteger-l1-1-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

ext-ms-win-uiacore-l1-1-1

propsys

api-ms-win-shell-namespace-l1-1-0

api-ms-win-core-path-l1-1-0

api-ms-win-core-registry-l2-1-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-psapi-l1-1-0

api-ms-win-core-namedpipe-l1-1-0

api-ms-win-shcore-obsolete-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-sidebyside-l1-1-0

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-interlocked-l1-1-0

user32

gdi32

shell32

winmm

imm32

usp10

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-core-memory-l1-1-0

d2d1

dwrite

dxgi

d3d11

d3dcompiler_47

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-core-version-l1-1-0

api-ms-win-core-realtime-l1-1-0

api-ms-win-core-io-l1-1-0

api-ms-win-core-file-l1-2-2

api-ms-win-core-file-l2-1-0

generic