TF-1844758
high
📛 Threat Title
Akira: MD5 hash of a malware sample (payload) ba9e9d8577544204e544d91a4cfbed9b
Description
Indicator that identifies a malware sample (payload). IOC type: MD5 hash of a malware sample (payload). Attributed malware: Akira (aliases: REDBIKE). Confidence: 75. First seen: 2026-07-04 16:17:47 UTC. Reporter: TheRavenFile. Tags: akira, Ransomware.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_md5
ba9e9d8577544204e544d91a4cfbed9b
IOC database
- Type
- hash_md5
- Value
ba9e9d8577544204e544d91a4cfbed9b- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- MD5 hash of a malware sample (payload) attributed to Akira
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (3)
- External reference ThreatFox IOCs
- Malpedia profile ThreatFox IOCs
-
ThreatFox IOC page
ThreatFox IOCs
Indicator that identifies a malware sample (payload). IOC type: MD5 hash of a malware sample (payload). Attributed malware: Akira (aliases: REDBIKE). Confidence: 75. First seen: 2026-07-04 16:17:47 UTC. Reporter: TheRavenFile. Tags: akira, Ransomware.
Remediations (10)
-
web:bazaar.abuse.ch
Using the form below, you can search for malware samples by a hash ( MD5 , SHA256, SHA1), imphash, tlsh hash , ClamAV signature, tag or malware family. Browse Database
-
web:bazaar.abuse.ch
A malware sample can be associated with only one malware family. The page below gives you an overview on malware samples that MalwareBazaar has identified as Akira .
-
web:bazaar.abuse.ch
Malware samples associated with tag akira MalwareBazaar Database Samples on MalwareBazaar are usually associated with certain tags. Every sample can associated with one or more tags. Using tags, it is easy to navigate through the huge amount of malware samples in the MalwareBazaar corpus. The page below gives you an overview on malware samples that are tagged with akira . Database Entry
-
web:bazaar.abuse.ch
MalwareBazaar Database This page shows some basic information the YARA rule MALWARE_Win_Akira including corresponding malware samples . Database Entry
-
web:malpedia.caad.fkie.fraunhofer.de
Details for the Akira malware family including references, samples and yara signatures.
-
web:threatfox.abuse.ch
Akira IOC: 5eadd67bec799465fa27a17d6bf93e2d ( md5_hash ) ThreatFox IOC Database You are viewing the ThreatFox database entry for md5_hash ...
-
web:threatfox.abuse.ch
Akira IOC: 90280056c5ad293736030e4747d80c01 ( md5_hash ) You are viewing the ThreatFox database entry for md5_hash 90280056c5ad293736030e4747d80c01.
-
web:threatfox.abuse.ch
Akira IOC: 1d895cf4391b817e54fb9ec9d8e65f7e ( md5_hash ) ThreatFox IOC Database You are viewing the ThreatFox database entry for md5_hash ...
-
web:threatfox.abuse.ch
Akira IOC: 0cb3ff08b5126d4fd6c85744b9bd6b94 ( md5_hash ) ThreatFox IOC Database You are viewing the ThreatFox database entry for md5_hash ...
-
web:www.scribd.com
The document reports the discovery of 17 new samples of Akira Ransomware, all sharing the same entry point and created on August 21, 2024. These samples , each sized at 1.02MB, began appearing between late September and December 2024, and are associated with specific mutexes linked to other malware . A list of MD5 hashes for the samples is also provided, along with a link to further resources.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.