1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe

Classification: Malicious

1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe is a malicious file sample. Linked to Akira malware. Detected by 101 antivirus engines.

Detection summary

  • 101 antivirus detections (71% detection ratio)
  • 0 IDS alerts
  • 4 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: AKIRA (S1129)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Cyber Threat Alliance 2026-08-12 10:08:53 2026-08-26 10:14:40 malicious-activity
Generic Malware Hybrid-Analysis 2023-07-24 18:45:06 2026-05-15 18:45:05
Akira Ransomware Maltiverse Research Team 2024-11-12 10:35:18 2024-11-12 10:35:18
Akira ransomware variant Malware News 2024-11-09 06:25:49 2024-11-09 06:25:49 S1129 Akira

Tags

evasive windows-server-utility ai-agent akira ransomware 98f2ed3f-3238-4af6-a398-488c1e6d65b2

Sample information

Filenames
1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe, akira.bin, 1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc
File type
PE32+ executable (console) x86-64, for MS Windows
Size
586752 bytes
MD5
503f112e243519a1b9e0344499561908
SHA-1
8d635ca131d8aa20971744dcb30a9e2e1f8cd1be
SHA-256
1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc
First indexed
2023-07-24 18:09:48
Last updated
2026-05-15 18:45:05

Antivirus detections

EngineDetection
BkavW32.Common.2EBE2123
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGeneric.Ransom.Akira.A.BD441183
ClamAVWin.Ransomware.Akira-10004844-0
FireEyeGeneric.mg.503f112e243519a1
CAT-QuickHealTrojanransom.Generic
ALYacTrojan.Ransom.Filecoder
MalwarebytesMalware.AI.4133534835
ZillyaTrojan.Generic.Win32.1740327
SangforRansom.Win32.Akira.Vt8r
K7AntiVirusRansomware ( 005a59911 )
AlibabaRansom:Win32/Akira.2ae946a4
K7GWRansomware ( 005a59911 )
Cybereasonmalicious.131d8a
CyrenW64/Akira.A.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win64/Filecoder.Akira.A
APEXMalicious
CynetMalicious (score: 99)
KasperskyHEUR:Trojan-Ransom.Win32.Generic
BitDefenderGeneric.Ransom.Akira.A.BD441183
AvastWin64:RansomX-gen [Ransom]
TencentMalware.Win32.Gencirc.10beec48
EmsisoftGeneric.Ransom.Akira.A.BD441183 (B)
F-SecureTrojan.TR/AD.Nekark.aovby
VIPREGeneric.Ransom.Akira.A.BD441183
TrendMicroRansom.Win64.AKIRA.SMTH
McAfee-GW-EditionRDN/Ransom
SophosTroj/Akira-A
GDataWin64.Trojan-Ransom.Akiranso.A
JiangminTrojan.Generic.hqwof
WebrootW32.Ransom.Akira
AviraTR/AD.Nekark.aovby
MAXmalware (ai score=89)
Antiy-AVLTrojan[Ransom]/Win64.Akira
ArcabitGeneric.Ransom.Akira.A.BDD6BB5F
ViRobotTrojan.Win.S.Ransom.586752
ZoneAlarmHEUR:Trojan-Ransom.Win32.Generic
MicrosoftRansom:Win32/Akira.A!ibt
GoogleDetected
AhnLab-V3Ransomware/Win.Akira.R587425
McAfeeRDN/Ransom
PandaTrj/CI.A
RisingRansom.Akira!1.E5DB (CLASSIC)
IkarusTrojan-Ransom.Akira
MaxSecureTrojan.Malware.10307848.susgen
FortinetW64/Filecoder.AKIR!tr.ransom
AVGWin64:RansomX-gen [Ransom]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaRansom:Win64/Akira.b5d46395
AviraHEUR/AGEN.1367006
BkavW64.AIDetectMalware
CAT-QuickHealRansom.Akira.S30272692
Cybereasonmalicious.e24351
CylanceUnsafe
DrWebTrojan.Encoder.37772
F-SecureTrojan:W32/Akira.A
FortinetW64/Akira.A!tr.ransom
GridinsoftRansom.Win64.AI.oa!s1
K7AntiVirusTrojan ( 005a55941 )
K7GWTrojan ( 005a55941 )
KasperskyHEUR:Trojan-Ransom.Win64.Akira.a
KingsoftWin32.Troj.Unknown.a
LionicTrojan.Win32.Akira.j!c
MAXmalware (ai score=100)
MalwarebytesRansom.Akira
MaxSecureTrojan.Malware.215904336.susgen
McAfeeDti!1B6AF2FBBC63
Paloaltogeneric.ml
SangforRansom.Win64.Akira.Vutt
SkyhighRDN/Ransom
VBA32TrojanRansom.Win64.Akira
VaristW64/Akira.A.gen!Eldorado
VirITTrojan.Win32.GenusT.DYBR
XcitiumMalware@#2y6new2u190qd
YandexTrojan.Filecoder!9jzrKSGTgF8
ZoneAlarmHEUR:Trojan-Ransom.Win64.Akira.a
alibabacloudRansomware:Win/Akira.A
huorongRansom/LockFile.kp
AlibabaRansom:Win64/Akira.22bc3377
AviraHEUR/AGEN.1375071
CTXexe.ransomware.akira
ClamAVMultios.Ransomware.Megazord-10021030-1
AVGWin64:MalwareX-gen [Ransom]
AvastWin64:MalwareX-gen [Ransom]
AviraTR/Ransom.Akira.eomap
DrWebTrojan.Encoder.42306
ElasticMulti.Ransomware.Akira
FortinetW64/Filecoder_Akira.A!tr.ransom
GDataWin64.Trojan-Ransom.Akira.C
GridinsoftRansom.Win64.Heur.cl
MicrosoftRansom:Win32/Akira!rfn
NANO-AntivirusTrojan.Win64.Ransom.kwsaxg
SangforTrojan.Win32.Save.a
SkyhighRansom-Akira!503F112E2435
TrellixENSRansom-Akira!503F112E2435
TrendMicro-HouseCallRansom.Win64.AKIRA.SMTH
ZoneAlarmTroj/Akira-A
huorongRansom/Akira.a

Process list

NameCommand line
akira.bin.exe
powershell.exe-Command "Get-WmiObject Win32_Shadowcopy | Remove-WmiObject"
1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
powershell.exe-Command "Get-WmiObject Win32_Shadowcopy | Remove-WmiObject"