aa.elf

Classification: Malicious

aa.elf is a malicious file sample. Linked to Akira activity. 6 sightings from 4 threat sources, last seen 2026-10-03.

Detection summary

  • 0 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: AKIRA (G1024)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Akira ThreatFox Abuse.ch 2026-10-03 12:46:57 2026-10-03 13:25:04
Generic Malware Cyber Threat Alliance 2026-09-09 17:05:55 2026-09-23 09:00:45 malicious-activity
Akira Triage 2026-09-09 07:20:46 2026-09-09 07:20:46 malicious-activity G1024 Akira
Akira MalwareBazaar Abuse.ch 2026-09-09 07:19:55 2026-09-09 07:19:55 malicious-activity

Tags

akira credential_access discovery linux ransomware elf.akira redbike

Sample information

Filenames
aa, aa.elf
MD5
7a7d7c2ab8913ec96b577344ec918d96
SHA-1
66f6bdb22385fc5f7824babb6f9d7c22e705c6c3
SHA-256
5f73fd2184ffc262f1bdac74b8f15c589f8d5cf986625ff687ecd32928241f80
First indexed
2026-09-09 07:19:55
Last updated
2026-09-24 01:05:41