Hide Navigation Hide TOC

Akira _v2 - S1194 (929d0d4d-b7c6-4ee8-81eb-43c849294e27)

Akira _v2 is a Rust-based variant of Akira ransomware that has been in use since at least 2024. Akira _v2 is designed to target VMware ESXi servers and includes a new command-line argument set and other expanded capabilities.(Citation: CISA Akira Ransomware APR 2024)(Citation: Cisco Akira Ransomware OCT 2024)(Citation: Palo Alto Howling Scorpius DEC 2024)

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Akira _v2 - S1194 (929d0d4d-b7c6-4ee8-81eb-43c849294e27)	Malware	Data Encrypted for Impact - T1486 (b80d107d-fa0d-4b60-9684-b0433e8bdba0)	Attack Pattern	1
Service Stop - T1489 (20fb2507-d71c-455d-9b6d-6104461cf26b)	Attack Pattern	Akira _v2 - S1194 (929d0d4d-b7c6-4ee8-81eb-43c849294e27)	Malware	1
Akira _v2 - S1194 (929d0d4d-b7c6-4ee8-81eb-43c849294e27)	Malware	Create or Modify System Process - T1543 (106c0cf6-bf73-4601-9aa8-0945c2715ec5)	Attack Pattern	1
Execution Guardrails - T1480 (853c4192-4311-43e1-bfbb-b11b14911852)	Attack Pattern	Akira _v2 - S1194 (929d0d4d-b7c6-4ee8-81eb-43c849294e27)	Malware	1
Akira _v2 - S1194 (929d0d4d-b7c6-4ee8-81eb-43c849294e27)	Malware	Log Enumeration - T1654 (866d0d6d-02c6-42bd-aa2f-02907fdc0969)	Attack Pattern	1
Akira _v2 - S1194 (929d0d4d-b7c6-4ee8-81eb-43c849294e27)	Malware	File and Directory Discovery - T1083 (7bc57495-ea59-4380-be31-a64af124ef18)	Attack Pattern	1