2026-05-28_ec20bdb75f0d4ddd40f559795b4cda74_akira_cobalt-strike_icedid_njrat_satacom_vidar
Classification: Malicious
2026-05-28_ec20bdb75f0d4ddd40f559795b4cda74_akira_cobalt-strike_icedid_njrat_satacom_vidar is a ransomware. Detected by 55 antivirus engines.
Detection summary
- 55 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: AKIRA (S1129)
Intrusion sets: AKIRA (G1024)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Akira | ThreatFox Abuse.ch | 2026-06-20 16:03:54 | 2026-06-20 16:25:10 | G1024 Akira S1129 Akira | |
| Akira | Triage | 2026-05-28 21:22:31 | 2026-05-28 21:22:31 | malicious-activity | G1024 Akira S1129 Akira |
Tags
akira execution persistence ransomware ransowmware spyware stealer win.akira redbikeSample information
- Filenames
- 2026-05-28_ec20bdb75f0d4ddd40f559795b4cda74_akira_cobalt-strike_icedid_njrat_satacom_vidar
- SHA-256
39d4984521a8088c0a0c9e4a3ffa8436ef123063344a2f260c36f551e9f2724d- First indexed
- 2026-05-28 21:22:31
- Last updated
- 2026-10-16 04:30:01
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Gen:Variant.Ransom.Akira.20 |
| APEX | Malicious |
| AVG | Win64:MalwareX-gen [Ransom] |
| AhnLab-V3 | Trojan/Win.Generic.R734525 |
| Alibaba | Ransom:Win64/Akira.65c78d0a |
| Antiy-AVL | Trojan[Ransom]/Win64.Akira |
| Arcabit | Trojan.Ransom.Akira.20 |
| Avast | Win64:MalwareX-gen [Ransom] |
| Avira | TR/W64.MalwareX |
| BitDefender | Gen:Variant.Ransom.Akira.20 |
| Bkav | W32.Malware.E366A30F |
| CAT-QuickHeal | Ransom.Akira.S35029956 |
| CTX | exe.ransomware.akira |
| ClamAV | Multios.Ransomware.Megazord-10021030-1 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Encoder.45881 |
| ESET-NOD32 | Win64/Filecoder.Akira.D trojan |
| Elastic | Multi.Ransomware.Akira |
| Emsisoft | Gen:Variant.Ransom.Akira.20 (B) |
| F-Secure | Trojan:W32/Akira.A |
| Fortinet | W64/Akira.A!tr.ransom |
| GData | Win64.Trojan-Ransom.Akira.B |
| Detected | |
| K7AntiVirus | Ransomware ( 005d00f51 ) |
| K7GW | Ransomware ( 005d00f51 ) |
| Kaspersky | HEUR:Trojan-Ransom.Win64.Akira.b |
| Kingsoft | Win64.Trojan-Ransom.Akira.b |
| Lionic | Trojan.Win64.Akira.tst9 |
| Malwarebytes | Akira.Ransom.FileCryptor.DDS |
| MaxSecure | Trojan.Malware.697847145.susgen |
| McAfeeD | Trojan:Win/GenericY.FNF |
| MicroWorld-eScan | Gen:Variant.Ransom.Akira.20 |
| Microsoft | Ransom:Win64/Akira.AA!MTB |
| Paloalto | generic.ml |
| Panda | Trj/CI.A |
| Rising | Ransom.Akira!1.127EE (CLASSIC) |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win64.Worm.th |
| Sophos | Troj/Akira-A |
| Symantec | Ransom.Akira |
| Tencent | Trojan-Ransom.Win64.Akira.16004370 |
| TrellixENS | Ransomware-IAA!EC20BDB75F0D |
| TrendMicro | Ransom.Win64.AKIRA.SMYXDJJT |
| TrendMicro-HouseCall | Ransom.Win64.AKIRA.SMYXDJJT |
| VIPRE | Gen:Variant.Ransom.Akira.20 |
| Varist | W64/Akira.B.gen!Eldorado |
| VirIT | Trojan.Win64.GenX.JQZ |
| Webroot | Win.Ransom.Akira |
| Zillya | Trojan.Filecoder.Win64.152686 |
| ZoneAlarm | Troj/Akira-A |
| alibabacloud | Ransomware:Win/Akira.D |
| huorong | Ransom/Akira.f |