TF-1962358
high
📛 Threat Title
Akira Stealer: MD5 hash of a malware sample (payload) b8574c6599e08ee86e8acd0743b15342
Description
Indicator that identifies a malware sample (payload). IOC type: MD5 hash of a malware sample (payload). Attributed malware: Akira Stealer. Confidence: 95. First seen: 2026-10-12 22:54:38 UTC. Reporter: Grim.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_md5
b8574c6599e08ee86e8acd0743b15342
IOC database
- Type
- hash_md5
- Value
b8574c6599e08ee86e8acd0743b15342- First seen
- Last seen
- Attached to this threat
- Appears in
- 2 threats
- Description
- MD5 hash of a malware sample (payload) attributed to Akira Stealer
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (2)
- Malpedia profile ThreatFox IOCs
-
ThreatFox IOC page
ThreatFox IOCs
Indicator that identifies a malware sample (payload). IOC type: MD5 hash of a malware sample (payload). Attributed malware: Akira Stealer. Confidence: 95. First seen: 2026-10-12 22:54:38 UTC. Reporter: Grim.
Remediations (10)
-
web:bazaar.abuse.ch
Using the form below, you can search for malware samples by a hash ( MD5 , SHA256, SHA1), imphash, tlsh hash , ClamAV signature, tag or malware family. Browse Database
-
web:bazaar.abuse.ch
Malware samples associated with tag akira MalwareBazaar Database Samples on MalwareBazaar are usually associated with certain tags. Every sample can associated with one or more tags. Using tags, it is easy to navigate through the huge amount of malware samples in the MalwareBazaar corpus. The page below gives you an overview on malware samples that are tagged with akira . Database Entry
-
web:boteraser.com
Known file hashes include MD5 e8d5c2a3b4f1c9e7d6a8f0b2c4d5e6f7 (from a sample analyzed by Hybrid Analysis, March 2023) and SHA256 a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2 (from VirusTotal community).
-
web:github.com
This report documents the static analysis of a confirmed Akira ransomware sample obtained from MalwareBazaar. Akira is a Ransomware- as -a-Service (RaaS) operation that emerged in March 2023 and rapidly became one of the most prolific ransomware groups globally, targeting primarily small-to-medium enterprises across healthcare, education, finance ...
-
web:imalware.com
Free MD5 hash lookup: paste a file hash and check it instantly against 1,045,564 known malware MD5 hashes. No upload, no sign-up. Learn how to get a file's MD5 on Windows, Mac and Linux.
-
web:threatfox.abuse.ch
Akira Stealer IOC: 8e7b9a5759e4cd645017aff73c5a0034 ( md5_hash ) You are viewing the ThreatFox database entry for md5_hash 8e7b9a5759e4cd645017aff73c5a0034.
-
web:threatfox.abuse.ch
Akira Stealer IOC: 1bd88b143a4e82734ddd1748865dd0c5 ( md5_hash ) You are viewing the ThreatFox database entry for md5_hash 1bd88b143a4e82734ddd1748865dd0c5.
-
web:www.cyfirma.com
Akira is an information stealing malware being offered on a dedicated website as MaaS ( malware - as -a-service) with the tag " Akira Undetector". The web platform provides an interface to generate a new stealer binary with instructions to use the malware , leveraging the Telegram channel to provide updates and command-and-control functionality.
-
web:www.glueckkanja.com
The stealer script was invoked directly from disk, but all staging and execution logic remained embedded within the Electron bundle. In summary, main.exe served as the obfuscated, multi-layered execution core — acting as the gatekeeper between initial persistence and the full activation of the Akira Stealer payload in astor.py.
-
web:www.trellix.com
First discovered in 2023, Akira ransomware seemed to be just another ransomware family that entered the market. This blog dives into Akira's inner workings.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.