db39502dde5980ff3f36c39fe540b49053d1baf46a393bc0f05fc9b0ccf47951.exe
Classification: Malicious
db39502dde5980ff3f36c39fe540b49053d1baf46a393bc0f05fc9b0ccf47951.exe is a malicious file sample. Linked to Akira malware. Detected by 62 antivirus engines.
Detection summary
- 62 antivirus detections
- 0 IDS alerts
- 4 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: AKIRA (S1129)
Intrusion sets: AKIRA (G1024)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Akira | ThreatFox Abuse.ch | 2026-06-20 16:04:00 | 2026-06-20 16:25:05 | G1024 Akira | |
| Generic Malware | Hybrid-Analysis | 2025-02-19 15:15:09 | 2025-03-13 15:15:12 | ||
| Akira | MalwareBazaar Abuse.ch | 2025-02-17 15:02:38 | 2025-02-17 15:02:38 | malicious-activity | S1129 Akira G1024 Akira |
Tags
evasive windows-server-utility win.akira redbikeSample information
- Filenames
- db39502dde5980ff3f36c39fe540b49053d1baf46a393bc0f05fc9b0ccf47951.exe, Akira.exe.malware, db39502dde5980ff3f36c39fe540b49053d1baf46a393bc0f05fc9b0ccf47951
- File type
- application/x-dosexec
- Size
- 1074688 bytes
- MD5
39fcc76a932f13e59fe129dfa773ee14- SHA-1
9fdb1746779eb784812f64817530d56ab13dfdd9- SHA-256
db39502dde5980ff3f36c39fe540b49053d1baf46a393bc0f05fc9b0ccf47951- First indexed
- 2025-02-18 08:28:59
- Last updated
- 2026-07-18 22:16:34
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Ransom.Filecoder |
| APEX | Malicious |
| AVG | Win64:MalwareX-gen [Trj] |
| AhnLab-V3 | Trojan/Win.Generic.R661893 |
| Alibaba | Ransom:Win64/Akira.4cb3750d |
| Antiy-AVL | Trojan[Ransom]/Win64.Akira |
| Arcabit | Generic.Dacic.4675.EE38B3A7 |
| Avast | Win64:MalwareX-gen [Trj] |
| Avira | HEUR/AGEN.1375071 |
| BitDefender | Generic.Dacic.4675.EE38B3A7 |
| Bkav | W32.Common.B1895807 |
| CAT-QuickHeal | Ransom.Akira.S34278419 |
| CTX | exe.ransomware.akira |
| ClamAV | Multios.Ransomware.Megazord-10021030-1 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Encoder.41420 |
| ESET-NOD32 | a variant of Win64/Filecoder.Akira.A |
| Elastic | Multi.Ransomware.Akira |
| Emsisoft | Generic.Dacic.4675.EE38B3A7 (B) |
| F-Secure | Trojan:W32/Akira.A |
| FireEye | Generic.Dacic.4675.EE38B3A7 |
| Fortinet | W64/Akira.A!tr.ransom |
| GData | Win64.Trojan-Ransom.Akira.B |
| Detected | |
| Gridinsoft | Malware.Win64.Gen.tr |
| Ikarus | Trojan-Ransom.Akira |
| Jiangmin | Trojan.Akira.m |
| K7AntiVirus | Trojan ( 005a6ac71 ) |
| K7GW | Trojan ( 005a6ac71 ) |
| Kaspersky | HEUR:Trojan-Ransom.Win64.Akira.b |
| Kingsoft | Win64.Trojan-Ransom.Akira.b |
| Lionic | Trojan.Win64.Akira.tst9 |
| Malwarebytes | Akira.Ransom.FileCryptor.DDS |
| MaxSecure | Trojan.Malware.218990743.susgen |
| McAfee | Ransom-Akira!39FCC76A932F |
| McAfeeD | ti!DB39502DDE59 |
| MicroWorld-eScan | Generic.Dacic.4675.EE38B3A7 |
| Microsoft | Ransom:Win64/Akira.AA!MTB |
| Paloalto | generic.ml |
| Panda | Trj/GdSda.A |
| Rising | Ransom.Akira!1.127EE (CLASSIC) |
| Skyhigh | BehavesLike.Win64.Worm.th |
| Sophos | Troj/Ransom-GZL |
| Symantec | Ransom.Zombie |
| Tencent | Malware.Win32.Gencirc.10c05129 |
| TrendMicro | Ransom.Win64.AKIRA.SMYXDJJT |
| TrendMicro-HouseCall | Ransom.Win64.AKIRA.SMYXDJJT |
| VBA32 | TrojanRansom.Akira |
| VIPRE | Generic.Dacic.4675.EE38B3A7 |
| Varist | W64/Akira.B.gen!Eldorado |
| ViRobot | Trojan.Win.Z.Akira.1074688.W |
| VirIT | Trojan.Win64.Genus.HGP |
| Webroot | W32.Ransom.Akira |
| Xcitium | Malware@#rez6u2evqa16 |
| Yandex | Trojan.Filecoder!iJh+sIlfaLE |
| Zillya | Trojan.Filecoder.Win64.116931 |
| ZoneAlarm | Troj/Ransom-GZL |
| alibabacloud | Ransomware:Win/Akira.A |
| huorong | Ransom/Akira.c |
Process list
| Name | Command line |
|---|---|
| db39502dde5980ff3f36c39fe540b49053d1baf46a393bc0f05fc9b0ccf47951.exe | |
| powershell.exe | -Command "Get-WmiObject Win32_Shadowcopy | Remove-WmiObject" |
| Akira.exe.malware.exe | |
| powershell.exe | -Command "Get-WmiObject Win32_Shadowcopy | Remove-WmiObject" |