TF-1983465 high

Description

Indicator that identifies a malware sample (payload). IOC type: MD5 hash of a malware sample (payload). Attributed malware: Akira Stealer. Confidence: 95. First seen: 2026-10-24 17:23:48 UTC. Reporter: Grim.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (2)

• Malpedia profile ThreatFox IOCs
• ThreatFox IOC page ThreatFox IOCs

  Indicator that identifies a malware sample (payload). IOC type: MD5 hash of a malware sample (payload). Attributed malware: Akira Stealer. Confidence: 95. First seen: 2026-10-24 17:23:48 UTC. Reporter: Grim.

• MalwareBazaar | Browse malware samples - abuse.ch
  web:bazaar.abuse.ch

  Using the form below, you can search for malware samples by a hash ( MD5 , SHA256, SHA1), imphash, tlsh hash , ClamAV signature, tag or malware family.

  2026-10-24 22:18 UTC
• MalwareBazaar | akira - abuse.ch
  web:bazaar.abuse.ch

  Malware samples associated with tag akira MalwareBazaar Database Samples on MalwareBazaar are usually associated with certain tags. Every sample can associated with one or more tags. Using tags, it is easy to navigate through the huge amount of malware samples in the MalwareBazaar corpus. The page below gives you an overview on malware samples that are tagged with akira . Database Entry

  2026-10-24 22:18 UTC
• malware-analysis-lab/analyses/Akira-Ransomware at main - GitHub
  web:github.com

  Executive Summary This report documents the static analysis of a confirmed Akira ransomware sample obtained from MalwareBazaar. Akira is a Ransomware- as -a-Service (RaaS) operation that emerged in March 2023 and rapidly became one of the most prolific ransomware groups globally, targeting primarily small-to-medium enterprises across healthcare, education, finance, and manufacturing sectors. The ...

  2026-10-24 22:18 UTC
• Malware Hash Lookup — Check MD5, SHA-1 & SHA-256
  web:imalware.com

  It compares a file's fingerprint (its MD5 , SHA-1 or SHA-256 hash ) with a list of fingerprints of known malware . If the hash matches, the file is identical to a known malicious sample .

  2026-10-24 22:18 UTC
• Akira Stealer malware sample 73de504b1d7c769d… | isMalicious
  web:ismalicious.com

  Akira Stealer malware sample 73de504b1d7c769d4d6bacd193b06f90aaf2fadb0fb7d2065eb02760d7074fde: threat listings, file type, antivirus signatures, public reports and its MD5 , SHA-1 and SHA-256, from the isMalicious threat intelligence dataset.

  2026-10-24 22:18 UTC
• Akira Stealer malware sample f63453a6624e5565… | isMalicious
  web:ismalicious.com

  Akira Stealer sample f63453a6624e55650957b76802c76c24678821a145694e8dc86b61ab19681e0b: listed by 2 threat sources ( malware , c2). File type, signatures, hashes, reports.

  2026-10-24 22:18 UTC
• ThreatFox | 8e7b9a5759e4cd645017aff73c5a0034
  web:threatfox.abuse.ch

  Akira Stealer IOC: 8e7b9a5759e4cd645017aff73c5a0034 ( md5_hash ) You are viewing the ThreatFox database entry for md5_hash 8e7b9a5759e4cd645017aff73c5a0034.

  2026-10-24 22:18 UTC
• ThreatFox | b57099b095ed6f665ea8e768f3c6d1d1
  web:threatfox.abuse.ch

  Akira Stealer IOC: b57099b095ed6f665ea8e768f3c6d1d1 ( md5_hash ) You are viewing the ThreatFox database entry for md5_hash b57099b095ed6f665ea8e768f3c6d1d1.

  2026-10-24 22:18 UTC
• Akira Stealer : An Undetected Python Based Info-stealer
  web:www.cyfirma.com

  Akira is an information stealing malware being offered on a dedicated website as MaaS ( malware - as -a-service) with the tag " Akira Undetector". The web platform provides an interface to generate a new stealer binary with instructions to use the malware , leveraging the Telegram channel to provide updates and command-and-control functionality.

  2026-10-24 22:18 UTC
• Akira Stealer: Technical Analysis of a Modular Info-Stealing Malware ...
  web:www.glueckkanja.com

  The stealer script was invoked directly from disk, but all staging and execution logic remained embedded within the Electron bundle. In summary, main.exe served as the obfuscated, multi-layered execution core — acting as the gatekeeper between initial persistence and the full activation of the Akira Stealer payload in astor.py.

  2026-10-24 22:18 UTC

Only Available for Registered Users. Sign in to view.