78d75669390e4177597faf9271ce3ad3a16a3652e145913dbfa9a5951972fcb0.bin.sample
Classification: Malicious
78d75669390e4177597faf9271ce3ad3a16a3652e145913dbfa9a5951972fcb0.bin.sample is a malicious file sample. Linked to Akira malware.
Detection summary
- 57 antivirus detections
- 0 IDS alerts
- 3 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: AKIRA (S1129)
Intrusion sets: AKIRA (G1024)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2024-11-19 12:00:04 | 2024-11-19 12:30:06 | ||
| Akira Ransomware | Maltiverse Research Team | 2024-11-12 10:31:28 | 2024-11-12 10:31:28 | ||
| Akira Ransomware | Cisco Talos | 2024-09-01 12:00:00 | 2024-11-12 10:03:03 | S1129 Akira G1024 Akira S1129 Akira G1024 Akira | |
| Akira ransomware | Maltiverse Research Team | 2024-11-12 09:55:20 | 2024-11-12 09:55:20 | S1129 Akira | |
| Akira ransomware | Cisco Talos | 2024-01-01 00:00:00 | 2024-11-11 12:53:17 | S1129 Akira T1486 Data Encrypted for Impact G1024 Akira | |
| Akira Ransomware | Cisco Talos Research | 2024-11-11 12:50:21 | 2024-11-11 12:50:21 | S1129 Akira | |
| Akira | ThreatFox Abuse.ch | 2024-11-09 08:24:55 | 2024-11-11 08:19:10 | S1129 Akira G1024 Akira | |
| Akira ransomware variant | Malware News | 2024-11-09 06:24:41 | 2024-11-09 06:24:41 | S1129 Akira |
Tags
ai-agent akira ransomware win.akira 98f2ed3f-3238-4af6-a398-488c1e6d65b2 akira-ransomware evasiveSample information
- Filenames
- 78d75669390e4177597faf9271ce3ad3a16a3652e145913dbfa9a5951972fcb0.bin.sample
- File type
- PE32+ executable (GUI) x86-64, for MS Windows
- Size
- 1074688 bytes
- MD5
436c014614477e79696e838d6b605f4e- SHA-1
8951e54fabdd4d8e424573e53a51e309203f6f41- SHA-256
78d75669390e4177597faf9271ce3ad3a16a3652e145913dbfa9a5951972fcb0- First indexed
- 2024-10-21 12:50:00
- Last updated
- 2025-09-04 17:00:42
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Ransom.Filecoder |
| APEX | Malicious |
| AVG | Win64:MalwareX-gen [Trj] |
| AhnLab-V3 | Trojan/Win.Generic.R661893 |
| Alibaba | Ransom:Win64/Akira.fecedc0b |
| Antiy-AVL | Trojan[Ransom]/Win64.Akira |
| Arcabit | Trojan.Zusy.D82025 |
| Avast | Win64:MalwareX-gen [Trj] |
| Avira | HEUR/AGEN.1375071 |
| BitDefender | Gen:Variant.Zusy.532517 |
| Bkav | W32.Common.B1895807 |
| CAT-QuickHeal | Ransom.Akira.S34278419 |
| CTX | exe.trojan.akira |
| ClamAV | Multios.Ransomware.Megazord-10021030-1 |
| CrowdStrike | win/malicious_confidence_90% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Encoder.41029 |
| ESET-NOD32 | a variant of Win64/Filecoder.Akira.A |
| Elastic | Windows.Ransomware.Akira |
| Emsisoft | Gen:Variant.Zusy.532517 (B) |
| F-Secure | Trojan:W32/Akira.A |
| FireEye | Gen:Variant.Zusy.532517 |
| Fortinet | W64/Filecoder.AKIR!tr.ransom |
| GData | Win64.Trojan-Ransom.Akira.B |
| Detected | |
| Ikarus | Trojan-Ransom.Akira |
| Jiangmin | Trojan.Akira.m |
| K7AntiVirus | Trojan ( 005a6ac71 ) |
| K7GW | Trojan ( 005a6ac71 ) |
| Kaspersky | HEUR:Trojan-Ransom.Win64.Akira.b |
| Lionic | Trojan.Win64.Akira.tst9 |
| Malwarebytes | Akira.Ransom.FileCryptor.DDS |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfee | Ransom-Akira!436C01461447 |
| McAfeeD | ti!78D75669390E |
| MicroWorld-eScan | Gen:Variant.Zusy.532517 |
| Microsoft | Ransom:Win64/Akira.AA!MTB |
| Paloalto | generic.ml |
| Panda | Trj/GdSda.A |
| Rising | Ransom.Akira!8.ECD1 (TFE:5:FxMvCRESCuC) |
| Skyhigh | BehavesLike.Win64.Worm.th |
| Sophos | Troj/Ransom-GZL |
| Symantec | Ransom.Akira!g1 |
| Tencent | Malware.Win32.Gencirc.10c05129 |
| TrendMicro | Ransom.Win64.AKIRA.SMYXDJJT |
| VIPRE | Gen:Variant.Zusy.532517 |
| Varist | W64/Akira.B.gen!Eldorado |
| VirIT | Trojan.Win64.Genus.HGP |
| Webroot | W32.Ransom.Akira |
| Zillya | Trojan.Filecoder.Win64.116931 |
| ZoneAlarm | HEUR:Trojan-Ransom.Win64.Akira.b |
| huorong | Ransom/Akira.c |
| CTX | exe.ransomware.akira |
| Skyhigh | BehavesLike.Win64.Ransomware.th |
| Yandex | Trojan.Filecoder!iJh+sIlfaLE |
Process list
| Name | Command line |
|---|---|
| 78d75669390e4177597faf9271ce3ad3a16a3652e145913dbfa9a5951972fcb0.bin.sample.exe | |
| powershell.exe | -Command "Get-WmiObject Win32_Shadowcopy | Remove-WmiObject" |
| DllHost.exe | /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} |