TF-1844731 high

Description

Indicator that identifies a malware sample (payload). IOC type: MD5 hash of a malware sample (payload). Attributed malware: Akira (aliases: REDBIKE). Confidence: 75. First seen: 2026-07-04 16:17:43 UTC. Reporter: TheRavenFile. Tags: akira, Ransomware.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (3)

• External reference ThreatFox IOCs
• Malpedia profile ThreatFox IOCs
• ThreatFox IOC page ThreatFox IOCs

  Indicator that identifies a malware sample (payload). IOC type: MD5 hash of a malware sample (payload). Attributed malware: Akira (aliases: REDBIKE). Confidence: 75. First seen: 2026-07-04 16:17:43 UTC. Reporter: TheRavenFile. Tags: akira, Ransomware.

• MalwareBazaar | Browse malware samples - abuse.ch
  web:bazaar.abuse.ch

  Using the form below, you can search for malware samples by a hash ( MD5 , SHA256, SHA1), imphash, tlsh hash , ClamAV signature, tag or malware family. Browse Database

  2026-07-28 05:29 UTC
• MalwareBazaar | Akira
  web:bazaar.abuse.ch

  A malware sample can be associated with only one malware family. The page below gives you an overview on malware samples that MalwareBazaar has identified as Akira .

  2026-07-28 05:29 UTC
• Akira Ransomware: Attack Trends & Defense | Qualys
  web:blog.qualys.com

  Akira ransomware is rapidly evolving. Discover how it works, who it targets, and how to defend against it with advanced security strategies.

  2026-07-28 05:29 UTC
• Akira Ransomware: Techniques, Payloads - iosec.in
  web:iosec.in

  Explore the Akira ransomware attack chain with real-world cases like KNP Logistics. Learn how it spreads, encrypts files, exfiltrates data, and how defenders can detect and respond effectively.

  2026-07-28 05:29 UTC
• Akira (Malware Family) - Fraunhofer
  web:malpedia.caad.fkie.fraunhofer.de

  Details for the Akira malware family including references, samples and yara signatures.

  2026-07-28 05:29 UTC
• CISA and Partners Release Advisory Update on Akira Ransomware
  web:www.cisa.gov

  This updated joint advisory provides network defenders with the latest indicators of compromise, tactics, techniques, and procedures, and detection methods associated with Akira ransomware activity.

  2026-07-28 05:29 UTC
• #StopRansomware: Akira Ransomware - CISA
  web:www.cisa.gov

  Akira ransomware threat actors are associated with other groups known as Storm-1567, Howling Scorpius, Punk Spider, and Gold Sahara, and may have connections to the defunct Conti ransomware group. Akira threat actors primarily target small- and medium-sized businesses, but have also impacted larger organizations across various sectors.

  2026-07-28 05:29 UTC
• Akira Ransomware 2025: Updated CISA Advisory, TTPs, and Defense Strategies
  web:www.picussecurity.com

  Learn how Akira ransomware operates in 2025 with updated CISA findings. Explore its latest TTPs, initial access methods, and actionable defense strategies.

  2026-07-28 05:29 UTC
• Akira Ransomware: In-Depth Analysis, Detection, and Mitigation
  web:www.sentinelone.com

  Akira Ransomware uses multi-extortion tactics and a retro-styled leak site. Learn about its negotiation processes and how to mitigate it.

  2026-07-28 05:29 UTC
• Akira Ransomware - Trellix
  web:www.trellix.com

  First discovered in 2023, Akira ransomware seemed to be just another ransomware family that entered the market. This blog dives into Akira's inner workings.

  2026-07-28 05:29 UTC

Only Available for Registered Users. Sign in to view.