b9c1e8700e39c6768be9d6bcb092cd6abe80d4244fc437566b58721cdc7d61ff
Classification: Malicious
b9c1e8700e39c6768be9d6bcb092cd6abe80d4244fc437566b58721cdc7d61ff is a malicious file sample. Linked to Akira malware. Detected by 57 antivirus engines.
Detection summary
- 57 antivirus detections
- 0 IDS alerts
- 2 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: AKIRA (S1129)
Intrusion sets: AKIRA (G1024)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Akira | ThreatFox Abuse.ch | 2026-06-20 16:04:00 | 2026-06-20 16:25:05 | G1024 Akira | |
| Generic Malware | Hybrid-Analysis | 2025-02-05 05:45:03 | 2025-02-05 07:15:10 | ||
| Akira | MalwareBazaar Abuse.ch | 2025-02-05 05:25:32 | 2025-02-05 05:25:32 | malicious-activity | S1129 Akira G1024 Akira |
Tags
evasive win.akira redbikeSample information
- Filenames
- b9c1e8700e39c6768be9d6bcb092cd6abe80d4244fc437566b58721cdc7d61ff
- File type
- PE32+ executable (GUI) x86-64, for MS Windows
- Size
- 1075200 bytes
- MD5
2918b9ddaf12a57f6710c07515b27a8b- SHA-1
c145a2e1b6352e9707921bcd1e16dce1796256f9- SHA-256
b9c1e8700e39c6768be9d6bcb092cd6abe80d4244fc437566b58721cdc7d61ff- First indexed
- 2025-02-05 05:26:54
- Last updated
- 2026-06-22 01:18:36
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Generic.Dacic.4675.F885AD06 |
| APEX | Malicious |
| AVG | Win64:RansomX-gen [Ransom] |
| AhnLab-V3 | Trojan/Win.Generic.R686619 |
| Alibaba | Ransom:Win64/Akira.0b404039 |
| Antiy-AVL | Trojan[Ransom]/Win64.Akira |
| Arcabit | Generic.Dacic.4675.F885AD06 |
| Avast | Win64:RansomX-gen [Ransom] |
| Avira | HEUR/AGEN.1375071 |
| BitDefender | Generic.Dacic.4675.F885AD06 |
| Bkav | W32.Common.82C40C90 |
| CAT-QuickHeal | Ransom.Akira.S34278419 |
| CTX | exe.ransomware.akira |
| ClamAV | Multios.Ransomware.Megazord-10021030-1 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Encoder.41482 |
| ESET-NOD32 | a variant of Win64/Filecoder.Akira.A |
| Elastic | Multi.Ransomware.Akira |
| Emsisoft | Generic.Dacic.4675.F885AD06 (B) |
| F-Secure | Trojan:W32/Akira.A |
| FireEye | Generic.Dacic.4675.F885AD06 |
| Fortinet | W64/Akira.A!tr.ransom |
| GData | Win64.Trojan-Ransom.Akira.B |
| Detected | |
| Gridinsoft | Ransom.Win64.FileCryptor.sa |
| Ikarus | Trojan-Ransom.Akira |
| K7AntiVirus | Trojan ( 005a6ac71 ) |
| K7GW | Trojan ( 005a6ac71 ) |
| Kaspersky | HEUR:Trojan-Ransom.Win64.Akira.b |
| Kingsoft | Win64.Trojan-Ransom.Akira.b |
| Lionic | Trojan.Win64.Akira.tst9 |
| Malwarebytes | Akira.Ransom.FileCryptor.DDS |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfee | Ransomware-HVB!2918B9DDAF12 |
| McAfeeD | ti!B9C1E8700E39 |
| MicroWorld-eScan | Generic.Dacic.4675.F885AD06 |
| Microsoft | Ransom:Win64/Akira.AA!MTB |
| Paloalto | generic.ml |
| Panda | Trj/GdSda.A |
| Rising | Ransom.Akira!8.ECD1 (TFE:5:FxMvCRESCuC) |
| Skyhigh | BehavesLike.Win64.Generic.th |
| Sophos | Troj/Ransom-GZL |
| Symantec | Ransom.Akira!g1 |
| Tencent | Malware.Win32.Gencirc.10c09643 |
| TrendMicro | Ransom.Win64.AKIRA.SMYXDJJT |
| VIPRE | Generic.Dacic.4675.F885AD06 |
| Varist | W64/Akira.B.gen!Eldorado |
| ViRobot | Trojan.Win.Z.Akira.1075200.B |
| VirIT | Trojan.Win64.Agent.HOR |
| Webroot | Win.Ransom.Akira |
| Yandex | Trojan.Filecoder!mXAA6b/DJ3s |
| Zillya | Trojan.Filecoder.Win64.117648 |
| alibabacloud | Ransomware:Win/Akira.A |
| huorong | Ransom/Akira.c |
Process list
| Name | Command line |
|---|---|
| b9c1e8700e39c6768be9d6bcb092cd6abe80d4244fc437566b58721cdc7d61ff.exe | |
| powershell.exe | -Command "Get-WmiObject Win32_Shadowcopy | Remove-WmiObject" |